Vulnerabilities

TI-2014-04310 CVE-2014-5276 · GHSA-6p8p-pr7r-jrrc

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit para…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02636 Published 2014-10-20 No fix listed CWE-79

TI-2008-04823 CVE-2008-5070 · GHSA-f248-crrm-ch4j

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled…

LOW 35

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to (1) profiles/index.php and (2) profiles/admin.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-11-14 No fix listed CWE-89

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms…

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled…