X7 Chat 2.0.4 - old_prefix Blind SQL Injection

X7 Chat 2.0.4 - oldprefix Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; i...

X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "Powered By X7 Chat"\r\n\r\n"; if...

Weak Mercury Messenger permissions

Chat log director yis world-readable...

Mercury Messenger

Problem description: Mercury Messenger, http://www.mercury.to/, is a java based messenger that will allow it's users to chat with MSN users. Currently it has been noted by two people that on a multi user OS X platform it is possible to read the chat logs from other users. The user specific...

Critical: Red Hat Security Advisory: seamonkey security update (was mozilla)

Updated seamonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...

CVE-2006-3669

Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...

CVE-2006-3669

Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...

CVE-2006-3669

CVE-2006-3669 affects Mercury Messenger (potentially 1.7.1.1 and other versions) on multi-user Mac OS X. The vulnerability arises because chat logs are stored with world-readable permissions within the /Users directory, allowing local users to read other users’ logs. The NVD entry lists a LOW bas...

CVE-2006-3365

V3 Chat allows remote attackers to obtain the installation path via 1 an invalid id parameter to mail/index.php or 2 membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement...

CVE-2006-3366

Multiple cross-site scripting XSS vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the 1 id parameter in a mail/index.php and b mail/reply.php; 2 loginid parameter in c members/isonline.php; 3 siteid...

CVE-2006-3365

The CVE affects V3 Chat. An incorrect SQL statement in mail/index.php (invalid id) and messenger/online.php (membername) causes an error page that reveals the installation path, constituting information disclosure. Exploitation details are not provided beyond this error-based exposure. NVD lists ...

CVE-2006-3366

Vulnerability: CVE-2006-3366 affects V3 Chat. Description confirms multiple cross-site scripting (XSS) vulnerabilities where crafted HTML tags injected via user-supplied parameters can lead to script/HTML execution. Specifically vulnerable parameters include id (in mail/index.php and mail/reply.p...

CVE-2006-3365

V3 Chat allows remote attackers to obtain the installation path via 1 an invalid id parameter to mail/index.php or 2 membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement...

CVE-2006-3366

Multiple cross-site scripting XSS vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the 1 id parameter in a mail/index.php and b mail/reply.php; 2 loginid parameter in c members/isonline.php; 3 siteid...

CVE-2006-3345

Cross-site scripting XSS vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitrary web script or HTML via a chat line...

CentOS 3 / 4 : mozilla (CESA-2006:0329)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issues that were fixed by thes...

Kil13r-SA-20060701-3.txt

Title: Kil13r-SA-20060701-3 Massting Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/30 - Discovery 2006/06/30 - Vendor notification 2006/06/30 - Vendor response 2006/06/30 - Vendor fix 2006/07/01 - Release Affected version: Not...

MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net

MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...

develooping.txt

Develooping Flash Chat bannedfile Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Include : http://www.target.com/path/chat/adminips.php?bannedfile=CmdShell /SpC-x...

jitakz.txt

Ji-takz Chat mycfg Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Include : http://www.target.com/path/tag.class.php?mycfg=H /SpC-x...