MPM Chat 2.5 - 'view.php?logi' Local File Inclusion

MPM Chat 2.5 view.php logi Local File Include Exploit D.Script: http://mpm.pahviloota.net/mpmchat25.zip Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code ?php if $logi != '' include 'archive/' . $logi; Exploit:...

MySpaceIM Chat Detection

Binary data 3939.prm...

Code injection

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information...

CVE-2007-1394

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information...

CVE-2007-1394

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information...

CVE-2007-1394

The CVE-2007-1394 entry concerns Flat Chat 2.0. It describes a direct static code injection vulnerability in startsession.php, where the Chat Name field is inserted into online.txt and subsequently included by users.php. The root cause is unsafely incorporating user-provided input into executable...

CVE-2007-1394: Undefined Security Weakness

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information...

Flat Chat 2.0 (include online.txt) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Flat Chat 2.0 include online.txt Remote Code Execution Vulnerability ====================================================================== .-""""""""-. / Dj7xpl \ | | ...

Flat Chat 2.0 - include online.txt Remote Code Execution

Flat Chat 2.0 - include online.txt Remote Code Execution .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ ++ + + + +=============================================+ + | | + | Portal : Flat Chat | + | Version : 2.0 | + | Author : Dj7xpl | [email protected] | +...

Flat Chat 2.0 - 'include online.txt' Remote Code Execution

.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ ++ + + + +=============================================+ + | | + | Portal : Flat Chat | + | Version : 2.0 | + | Author : Dj7xpl | [email protected] | + | Download : Http://www.undoweb.frih.net | + | Risk :...

seamonkey security update

CentOS Errata and Security Advisory CESA-2007:0077-01 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 20...

CVE-2006-7036

PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not b...

CVE-2006-7036

PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not b...

CVE-2006-7036

The CVE-2006-7036 entry concerns Andys Chat 4.5, where a PHP remote file inclusion in register.php allows arbitrary code execution via the action parameter. The description notes the issue was announced by an unreliable researcher and that the vendor is no longer distributing the product, so the ...

CVE-2006-7036: Undefined Security Weakness

PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not b...

Authentication flaw

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2006-7011

PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the bannedfile parameter. NOTE: CVE disputes this vulnerability because bannedfile is set to a constant value...

CVE-2007-0954

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2007-0954

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2007-0954

CVE-2007-0954 affects MOHA Chat 0.1b7 and earlier; the plug-in API can be used without authentication. The available sources state the impact and attack vectors are unknown, with no concrete remediation or exploitation details provided in the documents.