CVE-2004-2467: Undefined Security Weakness

chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service server crash...

CVE-2004-2465: Undefined Security Weakness

Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2004-2466: Improper Restriction of Operations within the Bounds of a Memory Buffer

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...

CVE-2002-1351

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service chat server crash and possibly execute arbitrary code via the msgText buffer in the chatInterpretData function, as demonstrated via a long Nick nickname request...

CVE-2004-2466

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service server crash via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected...

CVE-2004-2465

Cross-site scripting XSS vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2004-2467

chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service server crash...

PT-2004-3358 · Unknown · Easy Chat Server

Name of the Vulnerable Software and Affected Versions: Easy Chat Server versions 1.2 through 2.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a server crash. This can be achieved by providing a long username parameter, possibly due to a buffer overflow...

Bird Chat Server Invalid User DoS

Binary data 2135.prm...

12Planet Chat Server ClearText Password Remote Disclosure (deprecated)

Binary data 1543.prm...

12Planet Chat Server Path Disclosure

Binary data 1542.prm...

CVE-2004-0673

Cross-site scripting XSS vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message...

CVE-2004-0678

Cross-site scripting XSS in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter...

Multiple Vulnerabilities in Free Web Chat

Donato Ferrante Application: Free Web Chat http://sourceforge.net/projects/freewebchat/ Version: Initial Release Bugs: Multiple Vulnerabilities Date: 04-Aug-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

CVE-2004-0673

Cross-site scripting XSS vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message...

CVE-2004-0678

CVE-2004-0678 affects the 12Planet Chat Server 2.9, specifically the component one2planet.infolet.InfoServlet . The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to execute arbitrary script as other users by manipulating the page parameter. The NVD entry lists a ...

CVE-2004-0678

Cross-site scripting XSS in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter...

CVE-2004-0673

CVE-2004-0673 affects SCI Photo Chat Server 3.4.9 with a cross-site scripting (XSS) vulnerability that lets remote attackers trigger arbitrary script execution in other users by echoing an invalid request in the error message. The cited sources describe the issue but do not provide any concrete e...

CVE-2004-0678: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter...

CVE-2004-0673: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message...