9428 matches found
CVE-2008-2973
Multiple cross-site scripting XSS vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sitename and 2 wmessage parameters...
CVE-2008-2974
Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...
CVE-2008-2973
CVE-2008-2973 involves multiple XSS vulnerabilities in the chathead.php component of MM Chat 1.5. The flaws allow remote attackers to inject arbitrary web script or HTML via the sitename and wmessage parameters. The provided documents confirm the vulnerability details but do not include any remed...
CVE-2008-2974
MM Chat 1.5 is affected by a Directory Traversal in chatconfig.php. When register_globals is enabled, remote attackers can use directory traversal sequences in the currentlang parameter to include and execute local files. CVSS v2 base score is 6.8 (MEDIUM). Affected: MM Chat 1.5; exploit details ...
CVE-2008-2974
Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...
CVE-2008-2974: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...
CVE-2008-2973: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sitename and 2 wmessage parameters...
[BMSA 2008-07] Format string vulnerability in 5th stree
BLUE MOON SECURITY ADVISORY 2008-07 =================================== :Title: Format string vulnerability in 5th street Hot Step, High Street 5 :Severity: Critical :Reporter: Blue Moon Consulting, superkhung :Products: 5th street and derived clients :Fixed in: -- Description ----------- 5th...
MM Chat 1.5 目录遍历漏洞
No description provided by source...
MM Chat 1.5 (LFI/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ===================================================== MM Chat 1.5 LFI/XSS Multiple Remote Vulnerabilities ===================================================== -----------------------------------------------------------------------------¬...
mm chat 1.5 - Local File Inclusion Cross-Site Scripting
mm chat 1.5 - Local File Inclusion Cross-Site Scripting ??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From T...
mmchat-lfixss.txt
┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...
Cross site scripting
Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2008-2485
Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2008-2485
Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2008-2485
The CVE-2008-2485 entry describes an XSS vulnerability in the PCPIN Chat application (before 6.11) via the URL redirection script inc/url_redirection.inc.php. The root cause is unspecified in the docs beyond a cross-site scripting flaw that allows remote attackers to inject arbitrary web script o...
CVE-2008-2485: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
PCPIN Chat 6: potential XSS vulnerability in URL redirection script
All PCPIN Chat 6 versions prior to 6.11 are affected by the potential XSS vulnerability in URL redirection script. The vulnerability is caused by insufficient protocol scheme validation in file /inc/urlredirection.inc.php More info and patch here:...
Unfixed XSS vulnerability at securite.naoss.fr
Security researcher chat-man, has submitted on 05/06/2008 a cross-site-scripting XSS vulnerability affecting securite.naoss.fr, which at the time of submission ranked 12551905 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2008. It is...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...