逐浪cms sql注入漏洞2

简要描述： rt. 详细说明： 在线聊天功能都有,你敢信. 会员中心.在线聊天查找好友:http:demo.zoomla.cn/user/usertalk/SelectFrient.aspx,按昵称查找,注入点. user/usertalk/SelectFrient.aspx AppWebekn5n2xj.UserUsertalkSelectFrient button1Click cll = this.bu.GetuserTbUserBaseDataConverter.CLngthis.SelectID.Text; 按照ID查找处经过处理 cll =...

ClickDesk <= 4.3 - Live Chat Widget Multiple Field XSS

The Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites WordPress plugin was affected by a Live Chat Widget Multiple Field XSS security vulnerability...

AVChat Video Chat 1.4.1 - index_popup.php Multiple Parameters Reflected XSS

The Community Lite Video Chat WordPress plugin was affected by an indexpopup.php Multiple Parameters Reflected XSS security vulnerability...

Zopim Live Chat <= 1.2.5 - XSS in ZeroClipboard

The Zendesk Chat WordPress plugin was affected by a XSS in ZeroClipboard security vulnerability...

Click Desk Live Support Chat - Cross Site Scripting

The clickdesk-live-support-chat WordPress plugin was affected by a Cross Site Scripting security vulnerability...

WordPress AVChat Video Chat Plugin <= 1.4.1 - Reflected XSS

This plugin is prone to a cross site scripting vulnerability in indexpopup.php parameter. Solution Update the plugin...

Research Shows Increase in Internet Filtering and Usage of FireChat App in Iraq

Researchers at Citizen Lab have taken a close look at the extent of Internet filtering in Iraq, as well as the security of a popular offline chat app used there, and found an increase in the number of services blocked by the government and identified serious privacy and security problems with the...

WP Live Chat Support < 4.1.0 - XSS

The 3CX Live Chat WordPress plugin was affected by a XSS security vulnerability...

CVE-2014-4513

Multiple cross-site scripting XSS vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 MESSAGE, 2 EMAIL, or 3 NAME parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 MESSAGE, 2 EMAIL, or 3 NAME parameter...

CVE-2014-4513

Multiple cross-site scripting XSS vulnerabilities in server/offline.php in the ActiveHelper LiveHelp Live Chat plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 MESSAGE, 2 EMAIL, or 3 NAME parameter...

CVE-2014-4513

ActiveHelper LiveHelp Server 3.1.0 (WordPress plugin) contains multiple XSS flaws in server/offline.php, exploitable via the MESSAGE, EMAIL, or NAME parameters. Root cause: reflected/stored input not properly sanitized, allowing arbitrary script/HTML injection. Impact: potential theft or manipula...

mm chat 1.5 (lfi/xss) Multiple Vulnerabilities

No description provided by source...

X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered By X7 Chat\r\n\r\n; if $argc3...

Free Web Chat Initial Release UserManager.java Null Pointer DoS

No description provided by source. source: http://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient...

Free Web Chat Initial Release Connection Saturation DoS

No description provided by source. source: http://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient...

12Planet Chat Server 2.5 Error Message Installation Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7355/info When certain malformed URL requests are sent to a 12Planet Chat Server, the server's installation path may be revealed in the returned error message. This information could be used by a remote attacker to launch...

Flat Chat 2.0 (include online.txt) Remote Code Execution Vulnerability

No description provided by source. .--. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8|-\IIIIII/-| / \ / @ ++ + + + +=============================================+ + | | + | Portal : Flat Chat | + | Version : 2.0 | +...

Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...

ATutor 1.5.1 Chat Logs Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14832/info ATutor is prone to a remote information disclosure vulnerability. This issue is due to a failure in the application to perform proper access validation before granting access to privileged information. A remote...