Vulnerabilities

TI-2008-02377 CVE-2008-2485 · GHSA-65p7-26xf-rfqw

Cross-site scripting (XSS) vulnerability in the URL redirection script…

LOW 22

Cross-site scripting (XSS) vulnerability in the URL redirection script (inc/url_redirection.inc.php) in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-05-28 No fix listed CWE-79

TI-2006-01908 CVE-2006-1963 · GHSA-gv7p-4h64-hm86

Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows…

LOW 28

Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." (dot dot) in a language cookie, as demonstrated by uplo…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01607 Published 2006-04-21 No fix listed

TI-2006-01907 CVE-2006-1962 · GHSA-2m48-r7v9-8g4w

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to…

LOW 36

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01548 Published 2006-04-21 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the URL redirection script…

Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows…

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to…