CVE-2008-2974

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...

[BMSA 2008-07] Format string vulnerability in 5th stree

BLUE MOON SECURITY ADVISORY 2008-07 =================================== :Title: Format string vulnerability in 5th street Hot Step, High Street 5 :Severity: Critical :Reporter: Blue Moon Consulting, superkhung :Products: 5th street and derived clients :Fixed in: -- Description ----------- 5th...

MM Chat 1.5 目录遍历漏洞

No description provided by source...

MM Chat 1.5 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== MM Chat 1.5 LFI/XSS Multiple Remote Vulnerabilities ===================================================== -----------------------------------------------------------------------------¬...

mmchat-lfixss.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

mm chat 1.5 - Local File Inclusion Cross-Site Scripting

mm chat 1.5 - Local File Inclusion Cross-Site Scripting ??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From T...

Cross site scripting

Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-2485

Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-2485

Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-2485

The CVE-2008-2485 entry describes an XSS vulnerability in the PCPIN Chat application (before 6.11) via the URL redirection script inc/url_redirection.inc.php. The root cause is unspecified in the docs beyond a cross-site scripting flaw that allows remote attackers to inject arbitrary web script o...

PCPIN Chat 6: potential XSS vulnerability in URL redirection script

All PCPIN Chat 6 versions prior to 6.11 are affected by the potential XSS vulnerability in URL redirection script. The vulnerability is caused by insufficient protocol scheme validation in file /inc/urlredirection.inc.php More info and patch here:...

Unfixed XSS vulnerability at securite.naoss.fr

Security researcher chat-man, has submitted on 05/06/2008 a cross-site-scripting XSS vulnerability affecting securite.naoss.fr, which at the time of submission ranked 12551905 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2008. It is...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...

CVE-2008-2074

Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...

CVE-2008-2074

Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...

CVE-2008-2074

CVE-2008-2074 affects Harris Wap Chat 1.0. Multiple PHP remote file inclusion vulnerabilities occur when register_globals is enabled. Attackers can cause arbitrary PHP code execution by supplying a URL in the sysFileDir parameter to a set of scripts (eng.writeMsg.php, eng.adCreate.php, eng.adCrea...

oxyproject-exec.txt

OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh = fopen$editfile, 'a' or die"Error...

harris-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks To : sekuritionline, semprol, bajingan, mimid,...

OxYProject 0.85 (edithistory.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ===================================================================== OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability ===================================================================== OxYProject 0.85 edithistory.php...

OxYProject 0.85 (edithistory.php) Remote Code Execution Vulnerability

No description provided by source. OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh =...