CVE-2008-7047

CVE-2008-7047 affects NatterChat 1.1, where remote attackers can bypass authentication and obtain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp. The OpenVAS entries and NVD record corroborate a security bypass vulnerability with a CVSSv2 base...

CVE-2008-7048: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via the 1 txtUsername parameter to registerDo.asp, as invoked from register.asp, or 2 txtRoomName parameter to roomnew.asp. NOTE: these issues might be resultant from...

CVE-2008-7049: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...

CVE-2008-7047: Improper Authentication

NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp...

CVE-2008-5602

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

Improper access control

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

CVE-2008-5602

CVE-2008-5602 affects Natterchat 1.12, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database file (natterchat112.mdb) via a direct request. The sources explicitly describe the file exposure and lack of access rest...

CVE-2008-5602

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

CVE-2008-5602: Undefined Security Weakness

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

NatterChat 1.12 Database Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Natterchat Version : v1.12...

NatterChat 1.12 (natterchat112.mdb) Database Disclosure Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script...

Natterchat 1.12 - Database Disclosure

Natterchat 1.12 - Database Disclosure -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ...

NatterChat 1.12 (natterchat112.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== NatterChat 1.12 natterchat112.mdb Database Disclosure Vulnerability =====================================================================...

Natterchat 1.12 - Database Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Natterchat Version : v1.12...

Natterchat 1.12 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. + Script Name : Natterchat v1.12 Auth Bypass Remote SQL Injection Vulnerability + Author : Mountassif Moad + Dork : Powered by Natterchat v1.12 + Expl0iT : 1 Go to the Login page http://www.site.il/chat/nattechat/home.asp 2 Username : admin Password : ' or '1'='...

NatterChat 1.1 Remote Admin Bypass Vulnerability

No description provided by source. ============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad =...

natterchat-sql.txt

Script Name : Natterchat v1.12 Auth Bypass Remote SQL Injection Vulnerability + Author : Mountassif Moad + Dork : Powered by Natterchat v1.12 + Expl0iT : 1 Go to the Login page http://www.site.il/chat/nattechat/home.asp 2 Username : admin Password : ' or '1'='1 Live Demo...

Natterchat 1.12 - Authentication Bypass

Natterchat 1.12 - Authentication Bypass + Script Name : Natterchat v1.12 Auth Bypass Remote SQL Injection Vulnerability + Author : Mountassif Moad + Dork : Powered by Natterchat v1.12 + Expl0iT : 1 Go to the Login page http://www.site.il/chat/nattechat/home.asp 2 Username : admin Password : ' or...

Natterchat 1.1 - Remote Authentication Bypass

============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad === XPL === »...

NatterChat 1.1 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. + Script Name : NATTERCHAT v1.1 remote login bypass + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by NATTERCHAT v 1.1 --//-- + Expl0iT : 1 Go to the Login page http://www.exemple.ff/chat/nattechat/home.asp ...