CVE-2006-1669: Undefined Security Weakness

SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval...

Vypres Chat DoS

It's possible to ban any IP address by malformed mesage...

warcraftIII-18c.txt

Website : http://toya.net.pl/julas/w3g/ Version : 1.8c Description : Warcraft III Replay Parser for PHP? What is that? Maybe you know or maybe not that Warcraft III replay files .w3g have much information inside. Almost everything can be pulled out of them: players accounts, races, colours, heroe...

Mercora IMRadio Detection

Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. OpenVAS Vulnerability Test $Id: mercoraimradioinstalled.nasl...

Information disclosure

Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...

CVE-2006-0917

Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...

CVE-2006-0917

Technical details about CVE-2006-0917 are not provided in the connected documents; available sources describe cookies disclosure via a vulnerable link but do not specify affected versions, root cause, or remediation in these inputs.

CVE-2006-0917

Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...

CVE-2006-0917: Undefined Security Weakness

Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...

[Full-disclosure] PHPMyChat Authentication Bypass

PHPMyChat Authentication Bypass ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ I won't have bothered to post this silly flaw but after seeing the google search result for inurl:phpMyChat.php3 , I thought it would be good idea to keep people informed. I. BACKGROUND phpMyChat is an easy-to-install, easy-to-use...

CVE-2006-0467

Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...

Code injection

Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...

CVE-2006-0467

Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...

CVE-2006-0467

Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...

CVE-2006-0467: Undefined Security Weakness

Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...

Pioneers game server DoS

Oversized chat message causes game server to crash...

[SA18647] Pioneers Long Chat Message Denial of Service Vulnerability

TITLE: Pioneers Long Chat Message Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18647 VERIFY ADVISORY: http://secunia.com/advisories/18647/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Pioneers 0.x http://secunia.com/product/7175/ DESCRIPTION: Bas Wijnen has...

Sql injection

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Affected product: 123 Flash Chat Server 5.0 and 5.1. Vulnerable: eval injection in username handling that allows arbitrary code execution. Root cause: crafted username processed in a way that enables code execution. Impact: potential compromise of confidentiality, integrity, and availability (as ...