CVE-2015-6512

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

FreiChat 9.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FreiChat 9.6 SQL Injection Date: 27-11-2014 Software Link: http://codologic.com/page/freichat-free-php-chat-script-software Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.p...

GlobalLink 'GLChat.ocx' 2.5.1 ActiveX Control 'ChatRoom()' Buffer Overflow Vulnerability

No description provided by source...

SA-CONTRIB-2011-008 - Chatroom - Cross Site Scripting (XSS) and Cross Site Request Forgery

The Chatroom module provides real-time chat capabilities to Drupal. Vulnerability: Cross Site Scripting The module does not properly escape the contents of chat messages in pages listing the chats contained in a chatroom, leading to a Cross Site Scripting XSS vulnerability. Any user with permissi...

CVE-2006-6528

The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges...

CVE-2006-6529

The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview...

CVE-2006-6528

The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges...

CVE-2006-6528

CVE-2006-6528 affects the Drupal Chatroom Module (versions before 4.7.x.-1.0). The vulnerability arises because the module broadcasts visitors’ session IDs to all participants, enabling remote attackers to hijack sessions and gain privileges. The published description explicitly states the impact...

CVE-2006-6529

CVE-2006-6529 affects the Drupal Chatroom Module in versions before 4.7.x-1.0. The vulnerability arises because the module displays private messages in the chatroom’s last messages overview, allowing remote attackers to read sensitive information via the overview. Impact: information disclosure o...

CVE-2006-6529

The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview...

[SA23343] Drupal Chatroom Module Session ID Information Disclosure

TITLE: Drupal Chatroom Module Session ID Information Disclosure SECUNIA ADVISORY ID: SA23343 VERIFY ADVISORY: http://secunia.com/advisories/23343/ CRITICAL: Moderately critical IMPACT: Hijacking, Exposure of sensitive information WHERE: From remote SOFTWARE: Drupal Chatroom Module 4.x...

Chatroom - Security bypass

The contributed module Chatroom broadcasts session ids of chatroom visitors to all participants in a room. Using those IDs, an attacker is able to hijack the session of those participants and gain their privileges on the site. Additionally, messages supposed to be private are displayed in the las...

CVE-2005-1227

Cross-site scripting XSS vulnerability in PHProjekt 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatroom text submission form...

Secure Science Corporation Application Software Advisory 055

Secure Science Corporation Advisory ASA-055 http://www.securescience.net [email protected] 877-570-0455 --------------------------------------------------------- PHPROJEKT 4.2 Chatroom is vulnerable to Cross-Site Scripting XSS attacks allowing a "broadcast" attack to users in the...

CVE-2005-1227

Cross-site scripting XSS vulnerability in PHProjekt 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatroom text submission form...