508 matches found
CVE-2006-2671: Undefined Security Weakness
SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field...
CVE-2006-2592
Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...
CVE-2006-2592
Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...
CVE-2006-2592: Undefined Security Weakness
Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...
CVE-2006-1150: Undefined Security Weakness
Buffer overflow in Tenes Empanadas Graciela TEG 0.11.1, automatically appends an underscore to the end of duplicate nicknames, which allows remote attackers to cause a denial of service application crash by creating multiple users with long, identical nicknames, which triggers an off-by-one error...
Format string
Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in 1 a nickname, 2 a dedicated server name, or 3 a mapname in a level aka .lxl file...
CVE-2006-1075: Undefined Security Weakness
Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in 1 a nickname, 2 a dedicated server name, or 3 a mapname in a level aka .lxl file...
[CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting
PoC : -------------------- 1 This flaw exists because the application does not validate the "nickname" variable upon submission to the post.php script via the POST method. hp://www.target/post.php?nickname="scriptalert'XSS'/script!-- --------------------...
CVE-2006-0407: Undefined Security Weakness
Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...
Nokia Symbian 60 (Bluetooth Nickname) Remote Restart (update)
Exploit for hardware platform in category dos / poc ============================================================= Nokia Symbian 60 Bluetooth Nickname Remote Restart update ============================================================= / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit wi...
Nokia Symbian 60 - 'BlueTooth Nickname' Remote Restart (2)
/ Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth nickname, if any one search and find your nickname his mobile will restart . -...
CVE-2005-2774
Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...
CVE-2005-2774: Undefined Security Weakness
Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the nickname...
Quake 2 Lithium mode format string bug
Format string bug on parsing player's nickname...
CVE-2005-2639
Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...
CVE-2005-2639: Undefined Security Weakness
Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long nickname...
CVE-2005-2376
Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via a long 1 nickname or 2 chat message...
CVE-2005-2375
Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a 1 nickname or 2 chat message...
CVE-2005-2375: Undefined Security Weakness
Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via format string specifiers in a 1 nickname or 2 chat message...
CVE-2005-2376: Undefined Security Weakness
Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service application crash via a long 1 nickname or 2 chat message...