chatelao

Top products

The 9 most recently published vulnerabilities affecting chatelao.

• CVE-2020-37083addressbook 9.0.0.1 - 'id' SQL Injection8.2Feb 3, 2026
• CVE-2013-1748Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php. NOTE: the vi...7.5Apr 18, 2013
• CVE-2013-1749Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field.4.3Apr 18, 2013
• CVE-2013-2778Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests...7.5Apr 9, 2013
• CVE-2013-0135Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addre...7.5Apr 9, 2013
• CVE-2012-1912Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the ind...4.3Sep 9, 2012
• CVE-2012-1911Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) to_group parameter to group.php or (2) id paramete...7.5Sep 9, 2012
• CVE-2012-2903Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 7.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to group.php, or the (2) ...4.3May 21, 2012
• CVE-2009-2608Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to delete.php or (2) alphabet parameter to index.p...6.8Jul 27, 2009