CentOS 3 / 4 : seamonkey (CESA-2008:0208)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...

CVE-2008-1171

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...

Directory traversal

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot forward slash in the GET command...

CVE-2008-1171

CVE-2008-1171 concerns multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB. An attacker could trigger code execution via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. The CVE notes a dispute: phpbb_root_path is e...

CVE-2008-1169

The connected documents confirm a directory traversal vulnerability in the embedded HTTP server of SCI Photo Chat Server 3.4.9 and earlier. The flaw allows remote attackers to read arbitrary files by supplying ".." or "../" in the GET command. Affected component: embedded HTTP server within SCI P...

CVE-2008-1171: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...

CVE-2008-1169: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot forward slash in the GET command...

PT-2008-2764 · Phpbb · 123 Flash Chat Module

Name of the Vulnerable Software and Affected Versions: 123 Flash Chat Module for phpBB affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter to 1 "123flashchat.php" and 2 "phpbb login chat.php"...

123 Flash Chat Module for phpBB

Script : 123 Flash Chat Module for phpBB Discovered By : F10 Contact : [email protected] Site : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy , ercu145 , LupuS , m0sted , CyberGhost ... . From : Turkey Download : http://php.arsivimiz.com/indir.php?ID=996&sIslem=Indir The bugs are ...

123 Flash Chat Module for phpBB

Script : 123 Flash Chat Module for phpBB Discovered By : F10 Contact : [email protected] Site : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy , ercu145 , LupuS , m0sted , CyberGhost ... . From : Turkey Download : http://php.arsivimiz.com/indir.php?ID=996&sIslem=Indir The bugs are ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...

CVE-2008-0980

Multiple cross-site scripting XSS vulnerabilities in Spyce - Python Server Pages PSP 2.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the url or type parameter to docs/examples/redirect.spy; 2 the x parameter to docs/examples/handlervalidate.spy; 3 the name parameter to...

Zilab Chat and Instant Messaging (ZIM) 2.0/2.1 Server - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploit may allow remote attackers to execute arbitrary code in the context of the...

Zilab Chat and Instant Messaging (ZIM) 2.02.1 Server - Multiple Vulnerabilities

Zilab Chat and Instant Messaging ZIM 2.02.1 Server - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploi...

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access...

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal

source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks. Th...

PHP Live! <= 3.2.2 (questid) Remote SQL Injection Vulnerability

No description provided by source. !Info! PHP Live! 漏 OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your...

PHP Live! <= 3.2.2 (questid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP Live! = 3.2.2 questid Remote SQL Injection Vulnerability =============================================================== !Info! PHP Live! © OSI Codes Inc. enables live he...

PHP Live! 3.2.2 - questid SQL Injection (1)

PHP Live! 3.2.2 - questid SQL Injection 1 !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to yo...