Vulnerabilities (CVE)

Filtered by vendor Scott Weedon Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-3971 1 Scott Weedon 1 Ajax Chat 2024-02-04 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter.
CVE-2006-3972 1 Scott Weedon 1 Ajax Chat 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter.