CVE-2008-0945

Format string vulnerability in the logging function in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service daemon crash and possibly have unspecified other impact via format string specifiers in ...

Zilab Chat and Instant Messaging (ZIM) 2.0/2.1 Server - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploit may allow remote attackers to execute arbitrary code in the context of the...

Zilab Chat and Instant Messaging (ZIM) 2.02.1 Server - Multiple Vulnerabilities

Zilab Chat and Instant Messaging ZIM 2.02.1 Server - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploi...

Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1

Luigi Auriemma Application: Ipswitch Instant Messaging http://www.ipswitch.com/products/instantmessaging Versions: = 2.0.8.1 Platforms: Windows Bugs: A pre-auth NULL pointer crash in decryption function B format string in logging C arbitrary empty files creation Exploitation: remote A versus both...

Ipswitch Instant Messaging multiple security vulnerabilities

Format string vulnerability, multiple DoS conditions...

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite arbitrary files. Attackers can exploit...

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows...

Debian: Security Advisory (DSA-1433-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 414-1 (jabber)

The remote host is missing an update to jabber announced via advisory DSA 414-1. OpenVAS Vulnerability Test $Id: deb4141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 414-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1433-1 (centericq)

The remote host is missing an update to centericq announced via advisory DSA 1433-1. OpenVAS Vulnerability Test $Id: deb14331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1433-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-760-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-912-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6671

SQL injection vulnerability in loginform.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Password parameter, a different product than CVE-2006-6021. NOTE: some of these details are obtained from third party information...

CVE-2007-6671

SQL injection vulnerability in loginform.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Password parameter, a different product than CVE-2006-6021. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in loginform.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Username parameter, a different vulnerability than CVE-2007-6671. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2007-6671

CVE-2007-6671 is a SQL injection vulnerability in the login_form.asp of the Instant Softwares Dating Site. The flaw allows remote attackers to execute arbitrary SQL commands through the Password parameter (the description notes it is a different product than CVE-2006-6021). Other connected source...

CVE-2008-0130

SQL injection vulnerability in loginform.asp in Instant Softwares Dating Site allows remote attackers to execute arbitrary SQL commands via the Username parameter, a different vulnerability than CVE-2007-6671. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

CVE-2008-0131

Cross-site scripting XSS vulnerability in loginform.asp in Instant Softwares Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different product than CVE-2006-6022. NOTE: the provenance of this information is unknown; the details are obtained sole...

CVE-2008-0130

The CVE-2008-0130 entry documents a SQL injection vulnerability in Instant Softwares Dating Site, specifically in login_form.asp. The issue allows remote attackers to execute arbitrary SQL commands via the Username parameter (per the CVE description), and is identified alongside related entries s...

CVE-2008-0131

CVE-2008-0131 describes a Cross-site scripting (XSS) vulnerability in login_form.asp of Instant Softwares Dating Site, exploitable by remote attackers via the msg parameter. The description notes the vulnerability is in a different product than CVE-2006-6022 and that provenance is unknown with de...