CVE-2014-5276

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

Sql injection

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 password, 2 email, or 3 id parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

CVE-2014-5276

Multiple cross-site scripting XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via 1 an uploaded profile picture or 2 the edit parameter to profiles/index.php...

CVE-2014-5275

CVE-2014-5275 affects Pro Chat Rooms Text Chat Rooms 8.2.0; SQL injection vulnerabilities exist in includes/functions.php, exploitable via (1) password, (2) email, or (3) id parameters. The underlying cause is improper input handling that allows unauthenticated/injected SQL execution; however, th...

CVE-2014-5276

CVE-2014-5276 describes multiple XSS vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0. The issue allows remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php. Affected software: Pro Chat Rooms T...

CVE-2014-5275

Multiple SQL injection vulnerabilities in includes/functions.php in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 password, 2 email, or 3 id parameter...

Information disclosure

The MedQuiz: Medical Chat and MCQs aka com.pdevsmedd.med application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6713

Summary : The MedQuiz: Medical Chat and MCQs (com.pdevsmedd.med) Android app, version 1.5, does not verify X.509 certificates for SSL servers. This allows MITM attackers to spoof servers and exfiltrate sensitive information via a crafted certificate. Documented impacts include partial confidentia...

CVE-2014-6690

Affected software: InstaMessage – Instagram Chat (aka com.futurebits.instamessage.free), version 1.6.2 for Android. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: MITM attackers could spoof legitimate servers and obtain sensitive information via a crafted certifi...

Information disclosure

The ChatBox - Chat Rooms aka com.droidchatroom.messengerapp application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5958

Affected software: The ChatBox - Chat Rooms (com.droidchatroom.messengerapp) for Android, version 2.5. The vulnerability is improper SSL certificate validation where X.509 certificates from SSL servers are not verified, enabling man-in-the-middle attackers to spoof servers and obtain sensitive in...

CVE-2014-5934

The Flurv Chat aka com.flurv.android application 4.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Flurv Chat aka com.flurv.android application 4.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5934

CVE-2014-5934 affects the Flurv Chat app (com.flurv.android) version 4.3.3 on Android, where SSL/TLS connections do not verify X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected sources corroborat...

CVE-2014-5934

The Flurv Chat aka com.flurv.android application 4.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6392

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

Cross site scripting

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

PT-2014-7206 · Facebook · Facebook App +1

Name of the Vulnerable Software and Affected Versions: Facebook app version 14.0 Facebook Messenger app version 10.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME...

ChatSecure IM 2.2.4 iOS - Persistent Cross-Site Scripting

ChatSecure IM 2.2.4 iOS - Persistent Cross-Site Scripting Document Title: =============== ChatSecure IM v2.2.4 iOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1317 Release Date: ============= 2014-09-10 Vulnerability...