7927 matches found
CVE-2006-3851
SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the oldprefix parameter...
CVE-2006-3851
SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the oldprefix parameter...
CVE-2006-3851
The CVE-2006-3851 entry covers an SQL injection in upgradev1.php for X7 Chat 2.0.4 and earlier, exploitable via the old_prefix parameter to execute arbitrary SQL commands remotely. Affected product: X7 Chat (PHP-based web chat). Root cause: improper sanitization of the old_prefix input before use...
X7 Chat upgradev1.php old_prefix Parameter SQL Injection
The remote host is running X7 Chat, a web-based chat program written in PHP. The version of X7 Chat installed on the remote host fails to properly sanitize input to the 'oldprefix' parameter of the 'upgradev1.php' script before using it in a database query. This may allow an unauthenticated...
X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ X7 Chat = 2.0.4 oldprefix Remote Blind SQL Injection Exploit ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo "X7...
X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $ex...
X7 Chat 2.0.4 - old_prefix Blind SQL Injection
X7 Chat 2.0.4 - oldprefix Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; i...
X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "Powered By X7 Chat"\r\n\r\n"; if...
Weak Mercury Messenger permissions
Chat log director yis world-readable...
Mercury Messenger
Problem description: Mercury Messenger, http://www.mercury.to/, is a java based messenger that will allow it's users to chat with MSN users. Currently it has been noted by two people that on a multi user OS X platform it is possible to read the chat logs from other users. The user specific...
Critical: Red Hat Security Advisory: seamonkey security update (was mozilla)
Updated seamonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...
CVE-2006-3669
Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...
CVE-2006-3669
Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...
CVE-2006-3669
CVE-2006-3669 affects Mercury Messenger (potentially 1.7.1.1 and other versions) on multi-user Mac OS X. The vulnerability arises because chat logs are stored with world-readable permissions within the /Users directory, allowing local users to read other users’ logs. The NVD entry lists a LOW bas...
CVE-2006-3365
V3 Chat allows remote attackers to obtain the installation path via 1 an invalid id parameter to mail/index.php or 2 membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement...
CVE-2006-3366
Multiple cross-site scripting XSS vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the 1 id parameter in a mail/index.php and b mail/reply.php; 2 loginid parameter in c members/isonline.php; 3 siteid...
CVE-2006-3366
Vulnerability: CVE-2006-3366 affects V3 Chat. Description confirms multiple cross-site scripting (XSS) vulnerabilities where crafted HTML tags injected via user-supplied parameters can lead to script/HTML execution. Specifically vulnerable parameters include id (in mail/index.php and mail/reply.p...
CVE-2006-3365
The CVE affects V3 Chat. An incorrect SQL statement in mail/index.php (invalid id) and messenger/online.php (membername) causes an error page that reveals the installation path, constituting information disclosure. Exploitation details are not provided beyond this error-based exposure. NVD lists ...
CVE-2006-3365
V3 Chat allows remote attackers to obtain the installation path via 1 an invalid id parameter to mail/index.php or 2 membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement...
CVE-2006-3366
Multiple cross-site scripting XSS vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the 1 id parameter in a mail/index.php and b mail/reply.php; 2 loginid parameter in c members/isonline.php; 3 siteid...