9914 matches found
Happy Chat Cross-Site Scripting Vulnerability
Happy Chat is a Java multi-user chat application . A cross-site scripting vulnerability in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via parameters...
CVE-2011-5296
Cross-site scripting XSS vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...
CVE-2011-5296
Cross-site scripting XSS vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...
CVE-2011-5296
CVE-2011-5296 describes a cross-site scripting (XSS) vulnerability in Happy Chat 1.0, specifically in the profilo.php script where the nick parameter can be exploited to inject arbitrary web script or HTML. The vulnerability affects the nick input handling and allows remote attackers to execute i...
PT-2015-3492
Name of the Vulnerable Software and Affected Versions Happy Chat version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the nick parameter in the "profilo.php" file. This could potentially lead to malicious actions on the affect...
PT-2015-3493
Name of the Vulnerable Software and Affected Versions TTChat version 1.0.4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be exploited via...
CVE-2011-5296: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...
iWifi for Chat v1.1 iOS - Denial of Service Vulnerability
Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...
iWifi for Chat v1.1 iOS - Denial of Service Vulnerability
Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...
iWifi For Chat 1.1 Denial Of Service
Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...
iWifi for Chat v1.1 iOS - Denial of Service Vulnerability
Document Title: =============== iWifi for Chat v1.1 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1375 Release Date: ============= 2014-12-16 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2014-8998
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the pregreplace function with the eval switch...
Code injection
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the pregreplace function with the eval switch...
CVE-2014-8998
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the pregreplace function with the eval switch...
CVE-2014-8998
CVE-2014-8998 affects X7 Chat, specifically vulnerable in lib/message.php across versions 2.0.0–2.0.5.1. The issue allows a remote authenticated user to execute arbitrary PHP code by sending a crafted HTTP header to index.php, where the header is processed by preg_replace with the /e modifier. Th...
PT-2014-8777
Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.0 through 2.0.5.1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to "index.php", which is processed by the preg replace function with the eval switch. This c...
CVE-2014-8998: Improper Control of Generation of Code
lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute arbitrary PHP code via a crafted HTTP header to index.php, which is processed by the pregreplace function with the eval switch...
X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution
No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
