CVE-2008-6883

SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6881

The CVE-2008-6881 entry relates to multiple SQL injection vulnerabilities in the Joomla! Live Chat (com_livechat) 1.0 component. The connected Nessus plugin EU/Nessus plugin specifies that the issue arises from improper sanitization of the user-controlled last parameter in getChat.php and getSave...

CVE-2008-6881

Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...

CVE-2008-6882

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

CVE-2008-6883: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6881: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...

CVE-2008-6882: Improper Input Validation

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

Live Chat Component for Joomla! 'last' Parameter Multiple SQLi

The version of the Live Chat component for Joomla! running on the remote host is affected by multiple SQL injection vulnerabilities in getChat.php and getSavedChatRooms.php due to improper sanitization of user-supplied input to the 'last' parameter before using it to construct database queries...

Joomla Live Chat (SQL/Proxy) Multiple Remote Vulnerabilities

No description provided by source. Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the...

Joomla Live Chat (SQL/Proxy) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Joomla Live Chat SQL/Proxy Multiple Remote Vulnerabilities ============================================================ Joomla Live Chat http://www.joompolitan.com/livechat.html...

Joomla! Component live chat - SQL Injection Open Proxy

Joomla! Component live chat - SQL Injection Open Proxy Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don'...

Joomla Live Chat SQL Injection

Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the variable 'last': $last = isset$GET'last'...

Joomla! Component live chat - SQL Injection / Open Proxy

Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don't sanitize the variable 'last': $last = isset$GET'last'...

[waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01

waraxe-2008-SA063 - Information Leakage in Kayako SupportSuite 3.11.01 =============================================================================== Author: Janek Vind "waraxe" Date: 21. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-63.html Target software description...

CVE-2007-6085

Multiple cross-site scripting XSS vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the 1 vedipm or 2 livechat module...

omnistar-xss.txt

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

poc301-rfi.txt

-------------------------------------------------- PhpOpenChat = 3.0.1 poc.php Multiple Remote File Include Vulnerabilities -------------------------------------------------- Author : SekoMirza Date Found : Nisan 11 2007 Location : Fransa // ... Critical Lvl : Highly critical Impact : System acce...

PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities

-------------------------------------------------- PhpOpenChat = 3.0.1 poc.php Multiple Remote File Include Vulnerabilities -------------------------------------------------- Author : SekoMirza Date Found : Nisan 11 2007 Location : Fransa // ... Critical Lvl : Highly critical Impact : System acce...

phplive support request.php文件存在SQL注入漏洞以及暴绝对路径漏洞

暂无 php live =3.2.2 无 http://xxx.com/livechat/request.php?l=login&x=1%20and%20select%20count%20from%20mysql.user0/ 表: chatadmin login password ---------------------------------------------------------- 绝对路径 http://xxx.co...