Chipmunk Scripts produces a suite of lightweight web-based applications—including guestbooks, blogs, directory and forum software—that were widely deployed on shared hosting and personal websites, and its vulnerability profile centers on these modestly scoped but historically prominent products. The recurring weakness pattern reflects application-layer input handling, with SQL injection and cross-site scripting predominating alongside unclassified issues, and these disclosure categories frequently acquire public exploit code. Defenders maintaining legacy installations of this vendor's software should prioritize input-validation and output-encoding fixes; current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Chipmunk Scripts over time
Signals from CVEs in this vendor scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2010-4866HIGH SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter. | Oct 5, 2011 | 7.5 | 31 | NO | YES |
CVE-2010-4799MEDIUM Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and | Apr 27, 2011 | 6.8 | 30 | NO | YES |
CVE-2008-7071HIGH SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL commands via the username parameter, related to login.php. NO | Aug 25, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-0403HIGH SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password par | Feb 3, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-0399HIGH Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrat | Feb 3, 2009 | 7.5 | 28 | NO | YES |
CVE-2006-1683HIGH SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name. | Apr 11, 2006 | 7.5 | 28 | NO | YES |
CVE-2005-0368HIGH Multiple SQL injection vulnerabilities in CMScore allow remote attackers to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) user | May 2, 2005 | 7.5 | 28 | NO | YES |
CVE-2006-7042MEDIUM Cross-site scripting (XSS) vulnerability in directory/index.php in Chipmunk directory allows remote attackers to inject arbitrary web script or HTML via the start parameter. | Feb 24, 2007 | 6.8 | 26 | NO | YES |
CVE-2008-3186MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrary web script or HTML via the membername parameter to (1) mem | Jul 15, 2008 | 4.3 | 22 | NO | YES |
CVE-2008-7072MEDIUM Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary web script or HTML via the start parameter. | Aug 25, 2009 | 4.3 | 21 | NO | YES |
Signals from CVEs in this vendor scope (19 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Chipmunk Scripts.
Media articles that mention a CVE ID that affects a product developed by Chipmunk Scripts — matched by CVE ID, not by vendor name.