8538 matches found
CVE-2006-0917
Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...
CVE-2006-0917
Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...
CVE-2006-0917
Technical details about CVE-2006-0917 are not provided in the connected documents; available sources describe cookies disclosure via a vulnerable link but do not specify affected versions, root cause, or remediation in these inputs.
[Full-disclosure] PHPMyChat Authentication Bypass
PHPMyChat Authentication Bypass ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ I won't have bothered to post this silly flaw but after seeing the google search result for inurl:phpMyChat.php3 , I thought it would be good idea to keep people informed. I. BACKGROUND phpMyChat is an easy-to-install, easy-to-use...
Code injection
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
CVE-2006-0467
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
CVE-2006-0467
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
CVE-2006-0467
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
[SA18647] Pioneers Long Chat Message Denial of Service Vulnerability
TITLE: Pioneers Long Chat Message Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18647 VERIFY ADVISORY: http://secunia.com/advisories/18647/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Pioneers 0.x http://secunia.com/product/7175/ DESCRIPTION: Bas Wijnen has...
Pioneers game server DoS
Oversized chat message causes game server to crash...
Sql injection
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Affected product: 123 Flash Chat Server 5.0 and 5.1. Vulnerable: eval injection in username handling that allows arbitrary code execution. Root cause: crafted username processed in a way that enables code execution. Impact: potential compromise of confidentiality, integrity, and availability (as ...
icq-xss.txt
Title: ICQ Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Date: 10 January 2006 MorX Security Research Team http://www.morx.org Service: Web/Chat Vendor: ICQ.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: Medium/High Tested on: Microsoft IE 6.0 and...
123 Flash Chat 5.0 - Remote Code Injection
source: https://www.securityfocus.com/bid/16360/info 123 Flash Chat is prone to an arbitrary code injection weakness. An attacker can influence the value of a variable that is insecurely passed to an 'eval' call. Successful exploitation may allow attackers to take complete control of the...
Directory traversal
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...
CVE-2006-0223
CVE-2006-0223 is a directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1. Attackers can create or overwrite arbitrary files on the server by supplying ".." sequences in the username field. The provided documents describe the affected product and the vulnerability...
CVE-2006-0223
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...
