Stephen Craton Chatness

3 CVEs affecting Stephen Craton Chatness. Latest disclosed: 2007-04-19. Critical: 0, High: 0.

Top CVEs affecting Stephen Craton Chatness
CVESeverityScorePublishedSummary
CVE-2007-21492007-04-19Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/varstuff.php, and r…
CVE-2007-21482007-04-19Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authenticated administra…
CVE-2007-21472007-04-19admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to r…