Authentication flaw

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2007-0954

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2006-7011

Summary: CVE-2006-7011 is a PHP remote file inclusion vulnerability affecting the adminips.php file in Develooping Flash Chat. An attacker could trigger arbitrary PHP code execution by supplying a URL in the banned_file parameter. The CVSS 2.0 base metrics indicate a High impact with partial conf...

CVE-2007-0954

CVE-2007-0954 affects MOHA Chat 0.1b7 and earlier; the plug-in API can be used without authentication. The available sources state the impact and attack vectors are unknown, with no concrete remediation or exploitation details provided in the documents.

PT-2007-1290 · Develooping · Develooping Flash Chat

Name of the Vulnerable Software and Affected Versions: Develooping Flash Chat affected versions not specified Description: A remote file inclusion issue in the adminips.php file of Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned file parameter...

CVE-2006-6995

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

CVE-2006-6995

The CVE-2006-6995 issue affects V3 Chat’s mycontacts.php where an authenticated user can alter the membername parameter to gain privileges of another user. The vulnerability is described as a privilege escalation via parameter tampering, enabling access to other user accounts. Sources cited in th...

CVE-2006-6995

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

CVE-2007-0868

Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Security feature bypass

Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

CVE-2007-0814

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

CVE-2007-0814

CVE-2007-0814 affects Adrenalin's ASP Chat, where multiple XSS flaws exist in the chat input path: (1) via the psuedo (pseudo) field and (2) during chat. The root cause is improper input sanitization, enabling remote script/HTML injection. The CVSS base score is 4.3 (Medium) with no exploitation ...

CVE-2007-0814

Multiple cross-site scripting XSS vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML 1 via the psuedo pseudo field or 2 during chat...

Adrenalin's ASP Chat XSS

Adrenalin's ASP Chat XSS By : sn0oPy Risk : high exploit : just inject any script at your psuedo or on chat, to apply it for all the users connected Dork : intitle:"ASP Chat" contact : [email protected] greetz : subzero, http://forums.avenir-geopolitique.net. reference :...

Yahoo Messanger crossaplication scripting

Chat sign in / sign out messages are shown with Internet Explorer allowing scripting in local computer zone...

Hacking tricks of teach you make a simple QQ bomb-vulnerability warning-the black bar safety net

Today for everyone to talk about a simple production of the QQ bomb regard, absolutely everyone with a look of schooling would! The first method is the use of compressed packets, the method I used to teach my sister used that method and play with her classmate, first of all, we first create a...

Fedora Core 5 : mozilla-1.7.13-1.1.fc5 (2006-487)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...