Sql injection

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Affected product: 123 Flash Chat Server 5.0 and 5.1. Vulnerable: eval injection in username handling that allows arbitrary code execution. Root cause: crafted username processed in a way that enables code execution. Impact: potential compromise of confidentiality, integrity, and availability (as ...

Directory traversal

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

CVE-2006-0223

CVE-2006-0223 is a directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1. Attackers can create or overwrite arbitrary files on the server by supplying ".." sequences in the username field. The provided documents describe the affected product and the vulnerability...

CVE-2004-2465

CVE-2004-2465 describes an XSS vulnerability in Easy Chat Server 1.2, specifically in the chat.ghp component, where the username parameter can be exploited to inject arbitrary web script or HTML. The NVD entry notes a network-exposed vulnerability with no confidentiality impact, partial integrity...

CVE-2004-2466

CVE-2004-2466 affects Easy Chat Server. Public material shows a remote buffer overflow in the username/authentication handling that can crash the server (denial of service). Historical details reference v1.2 and later reports indicate v2.2 is affected; multiple exploit chains exist for Easy Chat ...

CVE-2004-2467

CVE-2004-2467 affects Easy Chat Server 1.2 (component: chat.ghp). The description from CVE records states that remote attackers can add a large number of fake users, eventually causing a denial of service (server crash). The connected documents corroborate this description across NVD and CVE list...

CVE-2004-2465

Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2004-2467

chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service server crash...

CVE-2004-2466

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...

CVE-2002-1351

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service chat server crash and possibly execute arbitrary code via the msgText buffer in the chatInterpretData function, as demonstrated via a long Nick nickname request...

CVE-2004-2465

Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2004-2466

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...

CVE-2004-2467

chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service server crash...

PT-2004-3358 · Unknown · Easy Chat Server

Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 1.2 through 2.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a server crash. This can be achieved by providing a long username parameter, possibly due to a buffer overflow...

12Planet Chat Server Path Disclosure

Binary data 1542.prm...

12Planet Chat Server ClearText Password Remote Disclosure (deprecated)

Binary data 1543.prm...

Bird Chat Server Invalid User DoS

Binary data 2135.prm...