9419 matches found
CVE-2007-0954
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...
CVE-2006-7011
PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the bannedfile parameter. NOTE: CVE disputes this vulnerability because bannedfile is set to a constant value...
Authentication flaw
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...
CVE-2007-0954
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...
CVE-2007-0954
CVE-2007-0954 affects MOHA Chat 0.1b7 and earlier; the plug-in API can be used without authentication. The available sources state the impact and attack vectors are unknown, with no concrete remediation or exploitation details provided in the documents.
CVE-2006-7011
Summary: CVE-2006-7011 is a PHP remote file inclusion vulnerability affecting the adminips.php file in Develooping Flash Chat. An attacker could trigger arbitrary PHP code execution by supplying a URL in the banned_file parameter. The CVSS 2.0 base metrics indicate a High impact with partial conf...
CVE-2007-0954: Undefined Security Weakness
MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...
PT-2007-1290 · Develooping · Develooping Flash Chat
Name of the Vulnerable Software and Affected Versions: Develooping Flash Chat affected versions not specified Description: A remote file inclusion issue in the adminips.php file of Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned file parameter...
CVE-2006-7011: Undefined Security Weakness
PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the bannedfile parameter. NOTE: CVE disputes this vulnerability because bannedfile is set to a constant value...
CVE-2006-6995
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...
CVE-2006-6995
The CVE-2006-6995 issue affects V3 Chat’s mycontacts.php where an authenticated user can alter the membername parameter to gain privileges of another user. The vulnerability is described as a privilege escalation via parameter tampering, enabling access to other user accounts. Sources cited in th...
CVE-2006-6995
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...
CVE-2006-6995: Undefined Security Weakness
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...
CVE-2007-0868
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Security feature bypass
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0868: Undefined Security Weakness
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...
CVE-2007-0814
Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...
CVE-2007-0814
CVE-2007-0814 affects Adrenalin's ASP Chat, where multiple XSS flaws exist in the chat input path: (1) via the psuedo (pseudo) field and (2) during chat. The root cause is improper input sanitization, enabling remote script/HTML injection. The CVSS base score is 4.3 (Medium) with no exploitation ...