WordPress Chat Plugin <= 1.0.8 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "message" parameter. Solution Update the plugin...

Cross site scripting

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4851

Cross-site scripting XSS vulnerability in Let's PHP! simple chat before 2016-08-15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5050

Unrestricted file upload vulnerability in chat/sendfile.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary code by uploading and requesting a .aspx file...

CVE-2016-5049

Directory traversal vulnerability in chat/openattach.aspx in ReadyDesk 9.1 allows remote attackers to read arbitrary files via a .. dot dot in the SESID parameter in conjunction with a filename in the FNAME parameter...

CVE-2016-5048

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

CVE-2016-5048

CVE-2016-5048 affects ReadyDesk 9.1 and targets the chat/staff/default.aspx login input. The user name field is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is described in multiple sources (NVD entry and CERT/CC advisory) with a high...

CVE-2016-5050

CVE-2016-5050 is an uncontrolled/ unrestricted file upload vulnerability within ReadyDesk 9.1, exploitable via chat/sendfile.aspx to upload a .aspx file and execute arbitrary code. The NVD entry documents an attack path that requires no authentication and network access, with a high severity (CVS...

Simple Chat Cross-Site Scripting Vulnerability

Simple Chat is a PHP and MySQL based Web chat program . A cross-site scripting vulnerability exists in versions of Simple Chat prior to 2016/08/15. An attacker can exploit this vulnerability to execute arbitrary script code...

simple chat vulnerable to cross-site scripting

Overview simple chat provided by Let's PHP! contains a cross-site scripting vulnerability CWE-79. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary...

JVN#42262137: simple chat vulnerable to cross-site scripting

simple chat provided by Let's PHP! contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affected simple...

Omegle, the Popular 'Chat with Strangers' Service Leaks Your Dirty Chats and Personal Info

Ever since the creation of online chat rooms and then social networking, people have changed the way they interact with their friends and associates. However, when it comes to anonymous chatting services, you don't even know what kinds of individuals you are dealing with. Sharing identifiable...

Scorp - Video Chat Rooms - Customized SSL, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Scorp - Video Chat Rooms published at the 'play' market has multiple vulnerabilities...

WordPress Plugin WP Live Chat Support Stored Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. WordPress plugin WP Live Chat Support has a stored cross-site scripting vulnerability that can be exploited by an attacker to log in as a WordPress user and perform...

WordPress WP Live Chat Support(6.2.03) plugin stored XSS

No description provided by source. !/usr/bin/python -- coding: utf-8 -- from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from pocsuite.api.utils import randomStr import urllib import re class TestPOCPOCBase: name = 'WordPress WP Live Chat...

Secure chat software Telegram will reveal in which the Copy-Paste of the text-vulnerability warning-the black bar safety net

! Security researcher Kirill Firsov found,currently more popular chat app Telegram the occurrence of a data breach. In OS X versions, the application will take the user to copy and paste the text is written to the/var/log/system. log filethe file is also known as syslog ,and thus the private...

World Of Warcraft recruitment: a command line can hijack your game with the hijacking code and video-bug warning-the black bar safety net

! Recently there has been a relates to the social worker, the technology, the new game attack of the Scam, the attacker uses the world of Warcraft World of Warcraft, WoW game plug-in a hidden function. New attacks Imagine this Scene: the game one looks like a well-known Guild members of a role,...

WP Live Chat Support < 6.2.04 - Stored Cross-Site Scripting (XSS)

The 3CX Live Chat WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

WordPress Live Chat Support Plugin <= 6.2.03 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress WP Live Chat Support 6.2.03 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in WP Live Chat Support WordPress Plugin Abstract A stored Cross-Site Scripting vulnerability was found in the WP Live Chat Support WordPress Plugin. This issue can be exploited by an unauthenticated...