Calendarscripts.com: Security Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in (1) fastchat.php and (2) fastshow.php.
CVSS Score
5.8
EPSS Score
0.004
Published
2006-05-30
SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field.
CVSS Score
5.0
EPSS Score
0.003
Published
2006-05-30