Vulnerabilities

TI-2009-01296 CVE-2009-1362 · GHSA-pqg9-w7ww-pq5c

SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote…

LOW 32

SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary SQL commands via the login_name parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00819 Published 2009-04-22 No fix listed CWE-89

TI-2009-01281 CVE-2009-1347 · GHSA-8qr8-24fg-gc28

Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote…

LOW 32

Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via (1) the login_name parameter (aka the username field) or (2) the login_pw paramete…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00959 Published 2009-04-20 No fix listed CWE-89

TI-2007-01794 CVE-2007-1871 · GHSA-gqq2-h7qx-83wh

Cross-site scripting (XSS) vulnerability in chcounter 3.1.3 allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in chcounter 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the login_name parameter to /stats/.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01264 Published 2007-04-13 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote…

Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote…

Cross-site scripting (XSS) vulnerability in chcounter 3.1.3 allows remote attackers to…