CentOS 3 / 4 : seamonkey (CESA-2008:1037)

Updated SeaMonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2008:1037)

Updated SeaMonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Live Chat Component for Joomla! 'last' Parameter Multiple SQLi

The version of the Live Chat component for Joomla! running on the remote host is affected by multiple SQL injection vulnerabilities in getChat.php and getSavedChatRooms.php due to improper sanitization of user-supplied input to the 'last' parameter before using it to construct database queries...

Joomla Live Chat SQL Injection

Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the variable 'last': $last = isset$GET'last'...

Joomla! Component live chat - SQL Injection Open Proxy

Joomla! Component live chat - SQL Injection Open Proxy Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don'...

Joomla! Component live chat - SQL Injection / Open Proxy

Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the variable 'last': $last = isset$GET'last'...

Joomla Live Chat (SQL/Proxy) Multiple Remote Vulnerabilities

No description provided by source. Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the...

Joomla Live Chat (SQL/Proxy) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Joomla Live Chat SQL/Proxy Multiple Remote Vulnerabilities ============================================================ Joomla Live Chat http://www.joompolitan.com/livechat.html...

Pro Chat Rooms 3.0.2 (XSS/CSRF) Multiple Vulnerabilities

No description provided by source. Pro Chat Rooms Version 3.0.2 XSS/CSRF Vulnerabilties AUTHOR : ZynbER MAiL : ZynbERatGmaildotcom HOME : NoWhere Script WebSite : http://www.prochatrooms.com Version : Pro Chat Rooms Version 3.0.2 EXPLOITS : -==XSS==-...

Pro Chat Rooms 3.0.2 - Cross-Site Scripting / Cross-Site Request Forgery

Pro Chat Rooms Version 3.0.2 XSS/CSRF Vulnerabilties AUTHOR : ZynbER MAiL : ZynbERatGmaildotcom HOME : NoWhere Script WebSite : http://www.prochatrooms.com Version : Pro Chat Rooms Version 3.0.2 EXPLOITS : -==XSS==- http://www.yoursite.com/path/profiles/index.php?gud=XSSED Vulnerable code in...

Pro Chat Rooms 3.0.2 (XSS/CSRF) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Pro Chat Rooms 3.0.2 XSS/CSRF Multiple Vulnerabilities ======================================================== Pro Chat Rooms Version 3.0.2 XSS/CSRF Vulnerabilties AUTHOR : ZynbER...

Pro Chat Rooms 3.0.2 - Cross-Site Scripting Cross-Site Request Forgery

Pro Chat Rooms 3.0.2 - Cross-Site Scripting Cross-Site Request Forgery Pro Chat Rooms Version 3.0.2 XSS/CSRF Vulnerabilties AUTHOR : ZynbER MAiL : ZynbERatGmaildotcom HOME : NoWhere Script WebSite : http://www.prochatrooms.com Version : Pro Chat Rooms Version 3.0.2 EXPLOITS : -==XSS==-...

Pro Chat Rooms 3.0.2 (XSS/CSRF) Multiple Vulnerabilities

No description provided by source. Pro Chat Rooms Version 3.0.2 XSS/CSRF Vulnerabilties AUTHOR : ZynbER MAiL : ZynbERatGmaildotcom HOME : NoWhere Script WebSite : http://www.prochatrooms.com Version : Pro Chat Rooms Version 3.0.2 EXPLOITS : -==XSS==-...

Pro Chat Rooms 3.0.2 XSS / XSRF

Pro Chat Rooms Version 3.0.2 XSS/CSRF Vulnerabilties AUTHOR : ZynbER MAiL : ZynbERatGmaildotcom HOME : NoWhere Script WebSite : http://www.prochatrooms.com Version : Pro Chat Rooms Version 3.0.2 EXPLOITS : -==XSS==- http://www.yoursite.com/path/profiles/index.php?gud=XSSED Vulnerable code in...

ZIM Server Multiple Vulnerabilities

The host is installed with ZIM Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzimservermultvuln800201.nasl 5370 2017-02-20 15:24:26Z cfi $ ZIM Server Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbone Networks GmbH,...

CVE-2008-5279

The Local ZIM Server zcs.exe in Zilab Chat and Instant Messaging ZIM Server 2.1 and earlier allow remote attackers to execute arbitrary code via 1 heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and 2 a stack-based buffer overflow with ...

CVE-2008-5280

The Local ZIM Server in Zilab Chat and Instant Messaging ZIM Server 2.0 and 2.1 allows remote attackers to cause a denial of service NULL pointer dereference via crafted requests without required parameters...

CVE-2008-5279

The CVE-2008-5279 entry concerns the Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier, where remote attackers can trigger arbitrary code execution via (1) heap-based buffer overflows from long room names or source accounts, and (2) a stack-based overflow...

CVE-2008-5280

The CVE-2008-5280 vulnerability affects the Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0/2.1. It allows remote attackers to cause a denial of service (NULL pointer dereference) through crafted requests without required parameters. The OpenVAS/NVD records corroborate this ...

CVE-2008-5280: Undefined Security Weakness

The Local ZIM Server in Zilab Chat and Instant Messaging ZIM Server 2.0 and 2.1 allows remote attackers to cause a denial of service NULL pointer dereference via crafted requests without required parameters...