WebChat 0.78 - login.php?rid SQL Injection

WebChat 0.78 - login.php?rid SQL Injection webchat 0.78 Class: SQL Injection Published 28/06/2007 Remote: Yes Critical Level : Dangerous Site: http://sourceforge.net/projects/webdev-webchat/ Download: http://downloads.sourceforge.net/webdev-webchat/webchat-078.zip?modtime=1046649600&bigmirror=0...

WebChat 0.78 (login.php rid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== WebChat 0.78 login.php rid Remote SQL Injection Vulnerability =============================================================== webchat 0.78 Class: SQL Injection Published...

WebChat 0.78 - 'login.php?rid' SQL Injection

webchat 0.78 Class: SQL Injection Published 28/06/2007 Remote: Yes Critical Level : Dangerous Site: http://sourceforge.net/projects/webdev-webchat/ Download: http://downloads.sourceforge.net/webdev-webchat/webchat-078.zip?modtime=1046649600&bigmirror=0 Author: r00t Vulnerable code: login.php...

Remote file inclusion

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter...

CVE-2007-0485

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter...

CVE-2007-0485

CVE-2007-0485 describes a PHP remote file inclusion in WebChat 0.77. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the WEBCHATPATH parameter of defines.php. Documents confirm the affected component is WebChat and the vulnerability is triggered via a remote includ...

CVE-2007-0485

PHP remote file inclusion vulnerability in defines.php in WebChat 0.77 allows remote attackers to execute arbitrary PHP code via a URL in the WEBCHATPATH parameter...

WebChat 0.77 (defines.php WEBCHATPATH) Remote File Include Vuln

No description provided by source. webchat Class: File Include Vulnerability Published 2007/1/21 Remote: Yes Critical Level : Dangerous Site: http://www.easy-script.com/compt.php?id=1705 || http://sourceforge.net/projects/webdev-webchat/ Author: TheViper-hacker Contact: [email protected]...

webchat File Include Vulnerability

webchat Class: File Include Vulnerability Published 2007/1/21 Remote: Yes Critical Level : Dangerous Site: http://www.easy-script.com/compt.php?id=1705 || http://sourceforge.net/projects/webdev-webchat/ Author: TheViper-hacker Contact: [email protected] file ; frame.php...

WebChat 0.77 - defines.php?WEBCHATPATH Remote File Inclusion

WebChat 0.77 - defines.php?WEBCHATPATH Remote File Inclusion webchat Class: File Include Vulnerability Published 2007/1/21 Remote: Yes Critical Level : Dangerous Site: http://www.easy-script.com/compt.php?id=1705 || http://sourceforge.net/projects/webdev-webchat/ Author: TheViper-hacker Contact:...

WebChat 0.77 (defines.php WEBCHATPATH) Remote File Include Vuln

Exploit for unknown platform in category web applications =============================================================== WebChat 0.77 defines.php WEBCHATPATH Remote File Include Vuln =============================================================== webchat Class: File Include Vulnerability Publish...

WebChat 0.77 - 'defines.php?WEBCHATPATH' Remote File Inclusion

webchat Class: File Include Vulnerability Published 2007/1/21 Remote: Yes Critical Level : Dangerous Site: http://www.easy-script.com/compt.php?id=1705 || http://sourceforge.net/projects/webdev-webchat/ Author: TheViper-hacker Contact: [email protected] file ; frame.php...

WebChat 2.0 - users.php?Database Username Disclosure

WebChat 2.0 - users.php?Database Username Disclosure source: https://www.securityfocus.com/bid/7777/info WebChat has been reported prone to a database username disclosure weakness. The issue presents itself when a malicious request is made for the WebChat ?users.php? page. An attacker may pass a...

Webchat 2.0 Module - Full Path Disclosure

Webchat 2.0 Module - Full Path Disclosure source: https://www.securityfocus.com/bid/7774/info Webchat has been reported prone to a path disclosure weakness. Reportedly an attacker may make a malicious HTTP request for several Webchat PHP scripts to trigger the condition. Under some circumstances...

WebChat 2.0 - 'users.php?Database Username Disclosure

source: https://www.securityfocus.com/bid/7777/info WebChat has been reported prone to a database username disclosure weakness. The issue presents itself when a malicious request is made for the WebChat ?users.php? page. An attacker may pass a guessed username as a specific URI parameter to the...

Webchat 2.0 Module - Full Path Disclosure

source: https://www.securityfocus.com/bid/7774/info Webchat has been reported prone to a path disclosure weakness. Reportedly an attacker may make a malicious HTTP request for several Webchat PHP scripts to trigger the condition. Under some circumstances the request will trigger an exception,...

WebChat 2.0 - users.php Cross-Site Scripting

WebChat 2.0 - users.php Cross-Site Scripting source: https://www.securityfocus.com/bid/7779/info WebChat has been reported prone to a cross-site scripting vulnerability. WebChat does not adequately filter script code from URI parameters, making it prone to cross-site scripting attacks...

WebChat 2.0 - 'users.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7779/info WebChat has been reported prone to a cross-site scripting vulnerability. WebChat does not adequately filter script code from URI parameters, making it prone to cross-site scripting attacks. Attacker-supplied script code may be included in a...

WebChat XSS

The remote host is vulnerable to a cross-site scripting attack through its web chat module : - An attacker may create a new user with a bogus email address containing JavaScript code - Then the profile of the newly created user or the 'lost password' page for this user will display the unprocesse...

WebChat defines.php WEBCHATPATH Parameter Remote File Inclusion

The version of Webchat installed on the remote host allows an attacker to read local files or execute PHP code, possibly taken from third- party sites, subject to the permissions of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: "Frog Man" To:...