CVE-2006-0223

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

CVE-2006-0223: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

security flaw

The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service infinite loop...

PT-2006-1226 · Adodb +9 · Adodb +9

Name of the Vulnerable Software and Affected Versions: ADODB versions prior to 4.70 Mantis versions prior to 1.1.0a PostNuke versions prior to 0.764 Moodle versions prior to 1.5.3 Cacti versions prior to 0.8.6i Xaraya versions prior to 0.98 PHPOpenChat versions prior to 1.0.6 MAXdev MD-Pro versio...

CVE-2004-2646

Affected software: Free Web Chat 2.0. Vulnerable component: addUser function in UserManager.java. Root cause: input condition where usrName is null leads to an uncaught NullPointerException, resulting in a denial of service. Exploit details, impact, and remediation are not provided beyond this de...

CVE-2004-2647

CVE-2004-2647 concerns Free Web Chat 2.0, where remote attackers can cause a denial of service by opening multiple connections from the same user, leading to CPU consumption and partial availability impact. The available records identify the affected product as Free Web Chat 2.0 and describe the ...

CVE-2004-2647

Free Web Chat 2.0 allows remote attackers to cause a denial of service CPU consumption via multiple connections from the same user...

CVE-2004-2646: Undefined Security Weakness

The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service uncaught NullPointerException via unknown attack vectors that cause the usrName variable to be null...

CVE-2004-2647: Undefined Security Weakness

Free Web Chat 2.0 allows remote attackers to cause a denial of service CPU consumption via multiple connections from the same user...

CVE-2002-2173

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

EUVD-2002-2152

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

CVE-2002-2173: Undefined Security Weakness

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

CVE-2005-3505

Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...

CVE-2005-3505

CVE-2005-3505 describes a cross-site scripting (XSS) flaw in the Entropy Chat script used by cPanel versions 10.2.0-R82 and 10.6.0-R137. The underlying issue is that a chat message containing JavaScript in style attributes within tags such as can be processed by Internet Explorer, enabling remot...

Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability

====================================================================== Secunia Research 04/11/2005 - cPanel Entropy Chat Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2005-3505: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...

Direct Connect hub detection

A Direct Connect 'hub' or server is running on this port. Direct Connect is a protocol used for peer-to-peer file-sharing as well as chat, and a hub routes communications among peers. While any type of file may be shared, Direct Connect hubs often handle movies, images, music files, and games,...

PT-2005-4124 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.13 Description: The issue is related to the IRC protocol dissector, which allows remote attackers to cause a denial of service by triggering an infinite loop. Recommendations: For Ethereal version 0.10.13, consider...

mwchat.txt

20.23 21/10/2005 MWCHAT 6.8 SQL INJECTION / REMOTE COMMANDS EXECUTION software: site: http://www.appindex.net description: a php chat no need for exploit code, poc:...

efriends.txt

AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...