CVE-2006-6933

Easy Chat Server 2.1 stores sensitive files under the web root with insufficient access control, enabling remote download of (at least) ServerKey.pem and AcceptIP.txt via direct requests. Root cause: improper access restrictions exposing sensitive files. No explicit exploitation details are provi...

CVE-2006-6933

Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

CVE-2006-6890

Voodoo chat 1.0RC1b stores passwords under the web root with insufficient access control, enabling remote retrieval of passwords via a direct request to data/users.dat. Affected component: the chat application’s data storage file (data/users.dat) exposed at web root. Root cause: inadequate access...

3APA3A : Hacking into HTML chats for one more time

More about HTML chat hacks one. PART ONE, or we show our own. The interface of almost any chat is based on dynamically generated HTML forms interconnected via javascript. In almost all chats, the username and password or some identifier that is generated when the user logs in is stored inside the...

CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat...

Voodoo chat 1.0RC1b (users.dat) Password Disclosure Vulnerability

No description provided by source. Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke,...

Voodoo chat 1.0RC1b Password Disclosure Vulnerability

Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, Shizoe +Exploit:...

Voodoo chat 1.0RC1b - users.dat Password Disclosure

Voodoo chat 1.0RC1b - users.dat Password Disclosure Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com...

Voodoo chat 1.0RC1b (users.dat) Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= Voodoo chat 1.0RC1b users.dat Password Disclosure Vulnerability ================================================================= Affected Software: Voodoo chat 1.0RC1b...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2006:0759)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

Voodoo chat 1.0RC1b - 'users.dat' Password Disclosure

Voodoo chat 1.0RC1b Password Disclosure Vulnerability Affected Software: Voodoo chat 1.0RC1b Download: http://switch.dl.sourceforge.net/sourceforge/voc/voc-1.0RC1b.zip Found3R: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, Shizoe +Exploit:...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

CVE-2006-6790

Summary: CVE-2006-6790 affects Ultimate PHP Board (UPB) 2.0b1 and earlier. The vulnerability is in chat/login.php where the username parameter is written to chat/text.php without proper sanitization, allowing an attacker to inject arbitrary PHP code that can be executed with the web server user p...

Ultimate PHP Board 2.0b1 - '/chat/login.php' Code Execution

!/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board +------------------------------------------------------------------------------------------- + Details: + Ultimate PHP Board chat/login.php does not sanatize the...

devhelp, seamonkey security update

CentOS Errata and Security Advisory CESA-2006:0759 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open sour...

Italk Project Security Advisory

================================================================ Italk Project Security Advisory ITALK-SA-1-1 ================================================================ First revision issued: 2006-12-15 Revision: 1 Software affected: italkplus 0.92 and before Kind of vulnerability: buffer...

phplive support request.php文件存在SQL注入漏洞以及暴绝对路径漏洞

暂无 php live =3.2.2 无 http://xxx.com/livechat/request.php?l=login&x=1%20and%20select%20count%20from%20mysql.user0/ 表: chatadmin login password ---------------------------------------------------------- 绝对路径 http://xxx.co...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + iWare Pro = 5.0.4 chatpanel.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- +...

iWare Pro 5.0.4 - chat_panel.php Remote Code Execution

iWare Pro 5.0.4 - chatpanel.php Remote Code Execution +------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare...