CVE-2005-2036

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

CVE-2005-2035

SQL injection vulnerability in login.asp for Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password...

CVE-2005-2035

CVE-2005-2035 concerns SQL injection in the login.asp of Cool Cafe (Cool Café) Chat 1.2.1. The vulnerability lets remote attackers run arbitrary SQL commands through the password field, enabling potential authentication bypass or data access. Affected product: Cool Cafe Chat 1.2.1; vulnerable com...

CVE-2005-2035

SQL injection vulnerability in login.asp for Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password...

Cool Cafe Chat 1.2.1 - login.asp SQL Injection

Cool Cafe Chat 1.2.1 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13976/info Cool Cafe Chat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an...

Important: Red Hat Security Advisory: mozilla security update

Updated mozilla packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 24 May 2005 This erratum now includes updated devhelp packages which are required to satisfy a dependancy on...

CVE-2005-1672

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...

CVE-2005-1672

Multiple cross-site scripting XSS vulnerabilities in Help Center Live allow remote attackers to inject arbitrary web script or HTML via the 1 find parameter to index.php, 2 name or 3 message field of a chat request, or 4 the message body when opening a trouble ticket...

CVE-2005-1672

Help Center Live (PHP-based live help desk with a MySQL backend) is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2005-1672. The XSS can be triggered by untrusted input in several fields: the find parameter to index.php, the name or message field of a chat requ...

CVE-2003-1188

Unichat allows remote attackers to cause a denial of service crash by adding extra chat characters avatars and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit...

CVE-2004-1802

Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page...

CVE-2004-1802

CVE-2004-1802 affects Chat Anywhere 2.72 and earlier. A remote attacker can hide their true IP address by sending %00 before the nickname, causing the IP to be displayed as $IP$ on the administration web page. This detail is supported by CVE records (CVE-2004-1802) and related databases. No addit...

CVE-2005-0522

Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges...

ICUII Detection

ICUII is installed on the remote host. ICUII is a video chat package for Windows that supports both 'family-oriented' and 'adult' themes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18174; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

mozilla security update

CentOS Errata and Security Advisory CESA-2005:386 Updated mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup...

Important: Red Hat Security Advisory: Mozilla security update

Updated mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Vladimir V...

WebcamXP Chat Name XSS

The remote host is running a version of webcamXP, a webcam software package and integrated web server for Windows, that suffers from an HTML injection flaw in its chat feature. An attacker can exploit this flaw by injecting malicious HTML and script code through the nickname field to redirect cha...

CVE-2005-1190

WebcamXP PRO v2.16.468 and earlier allows remote attackers to cause a denial of service via a long chat name, which takes up too much display space and prevents the chat frame from being properly rendered...

CVE-2005-1189

Cross-site scripting XSS vulnerability in WebcamXP PRO v2.16.468 and earlier allows remote attackers to inject arbitrary web script or HTML via the chat name, as demonstrated by using an IFRAME to redirect users to other sites...

[Full-disclosure] WebcamXP

------------------------------------------------------------ - EXPL-A-2005-005 exploitlabs.com Advisory 034 - ------------------------------------------------------------ - WebcamXP - OVERVIEW ======== webcamXP is one of the most popular webcam software for private and professional use. it offers...