medium5.0
CVE-2006-2671
SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field.
Impact
SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Calendarscripts.Com | Chatpat | Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20290
- http://securityreason.com/securityalert/989
- http://www.securityfocus.com/archive/1/435006/100/0/threaded
- http://www.vupen.com/english/advisories/2006/1986
- http://secunia.com/advisories/20290
- http://securityreason.com/securityalert/989
- http://www.securityfocus.com/archive/1/435006/100/0/threaded
- http://www.vupen.com/english/advisories/2006/1986