Pcpin

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pcpin records in CISA KEV

No Pcpin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pcpin Chat 3 records LOW

Records

3 records in Pcpin Chat · all components

TI-2006-01907 CVE-2006-1962 · GHSA-2m48-r7v9-8g4w

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to…

LOW 36

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01548 Published 2006-04-21 No fix listed CWE-89

TI-2006-01908 CVE-2006-1963 · GHSA-gv7p-4h64-hm86

Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows…

LOW 28

Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." (dot dot) in a language cookie, as demonstrated by uplo…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01607 Published 2006-04-21 No fix listed

TI-2008-02377 CVE-2008-2485 · GHSA-65p7-26xf-rfqw

Cross-site scripting (XSS) vulnerability in the URL redirection script…

LOW 22

Cross-site scripting (XSS) vulnerability in the URL redirection script (inc/url_redirection.inc.php) in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-05-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0