Vulnerabilities (CVE)

Filtered by vendor Sleeperchat Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-0415 1 Sleeperchat 1 Sleeperchat 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter.
CVE-2006-0416 1 Sleeperchat 1 Sleeperchat 2023-12-10 5.0 MEDIUM N/A
SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parameter to (1) chat_no.php and (2) chat_if.php.