CVE-2013-0739

Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script...

CVE-2013-0739

Summary: CVE-2013-0739 affects Chamilo 1.9.4 and involves an XSS vulnerability in the chat.php script caused by improper validation of user-supplied input. Affected component: Chamilo 1.9.4, specifically the chat.php feature. Root cause: Improper validation of input in the chat functionality enab...

CVE-2013-0739: Improper Neutralization of Input During Web Page Generation

Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script...

PT-2020-7336

Name of the Vulnerable Software and Affected Versions: Chamilo version 1.9.4 Description: The issue arises from improper validation of user-supplied input by the chat.php script, leading to a cross-site scripting XSS problem. XSS is a security vulnerability that occurs when an application include...

Sql injection

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...

CVE-2019-1010104

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...

PT-2019-11469

Name of the Vulnerable Software and Affected Versions: TechyTalk Quick Chat WordPress Plugin affected versions not specified Description: The issue allows for SQL Injection, which can provide access to the database. The component like escape used in Quick-chat.php line 399 is involved. The attack...

CVE-2019-1010104: Improper Neutralization of Special Elements used in an SQL Command

TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: likeescape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request...

CVE-2019-12963

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...

CVE-2019-12963

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...

CVE-2019-12963

LiveZilla Server is affected by CVE-2019-12963: prior to 8.0.1.1, the chat.php Create Ticket action is vulnerable to cross-site scripting (XSS). This is confirmed by multiple sources (NVD/Red Hat/CNVD/OpenVAS references) and is characterized by XSS in the Create Ticket/Work Order path. Exploitati...

PT-2019-13056

Name of the Vulnerable Software and Affected Versions LiveZilla Server versions prior to 8.0.1.1 Description The issue concerns a problem with the chat.php Create Ticket Action, where an XSS vulnerability is present. Recommendations For versions prior to 8.0.1.1, update to version 8.0.1.1 or late...

CVE-2019-12963: Improper Neutralization of Input During Web Page Generation

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...

Cross site scripting

A stored cross site scripting XSS vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php...

CVE-2018-20731

A stored cross site scripting XSS vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php...

CVE-2018-20731

CVE-2018-20731 is a stored XSS vulnerability in NeDi prior to 1.7Cp3, exploitable via User-Chat.php. Public records in NVD/NVD-derived feeds describe that remote attackers can inject arbitrary web script or HTML. The connected feeds confirm NeDi versions affected up to at least 1.7Cp3 and referen...

PT-2019-10190

Name of the Vulnerable Software and Affected Versions: NeDi versions prior to 1.7Cp3 Description: A stored cross site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the User-Chat.php file. Recommendations: For versions prior to 1.7Cp3, update to version...

CVE-2018-20731: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via User-Chat.php...

Fifa Master XLS 2.3.2 - 'usw' SQL Injection

Exploit Title: Fifa Master XLS 2.3.2 - 'usw' SQL Injection Dork: N/A Date: 2018-10-24 Exploit Author: Ihsan Sencan Vendor Homepage: http://fankstribe.org/ Software Link: https://sourceforge.net/projects/fifamasterxls/files/latest/download Version: 2.3.2 Category: Webapps Tested on:...

Ultrabenosaurus ChatBoard - Persistent Cross-Site Scripting

Ultrabenosaurus ChatBoard - Persistent Cross-Site Scripting Exploit Title: Ultrabenosaurus ChatBoard - Stored XSS Date: 2016-06-14 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://ultrabenosaurus.ninja/ Software Link:...