347 matches found
CVE-2006-6933
Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...
CVE-2006-6933
Easy Chat Server 2.1 stores sensitive files under the web root with insufficient access control, enabling remote download of (at least) ServerKey.pem and AcceptIP.txt via direct requests. Root cause: improper access restrictions exposing sensitive files. No explicit exploitation details are provi...
CVE-2006-6933
Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as 1 ServerKey.pem and 2 AcceptIP.txt. NOTE: The provenance of this information is unknown; the details...
Italk Project Security Advisory
================================================================ Italk Project Security Advisory ITALK-SA-1-1 ================================================================ First revision issued: 2006-12-15 Revision: 1 Software affected: italkplus 0.92 and before Kind of vulnerability: buffer...
Melange Chat Server 1.10 Remote Buffer Overflow Exploit
No description provided by source. / Proof of Concept for Melange Chat Server 1.10 a lame remote bof exploit by innerphobia [email protected] 12/24/02 Credits go to: - iDefense Labs for the advisory - blink for discovering the bug - Irian for the shellcode With careful calculation it is possible t...
DConnect Daemon chat server multiple security vulnerabilities
DoS conditions, format string vulnerabilities...
X7 Chat Server Detection
Binary data 3691.prm...
Information disclosure
Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...
CVE-2006-0917
Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...
CVE-2006-0917
Technical details about CVE-2006-0917 are not provided in the connected documents; available sources describe cookies disclosure via a vulnerable link but do not specify affected versions, root cause, or remediation in these inputs.
CVE-2006-0917
Melange Chat Server aka M-Chat, when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive...
Sql injection
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Affected product: 123 Flash Chat Server 5.0 and 5.1. Vulnerable: eval injection in username handling that allows arbitrary code execution. Root cause: crafted username processed in a way that enables code execution. Impact: potential compromise of confidentiality, integrity, and availability (as ...
Directory traversal
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...
CVE-2006-0223
CVE-2006-0223 is a directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1. Attackers can create or overwrite arbitrary files on the server by supplying ".." sequences in the username field. The provided documents describe the affected product and the vulnerability...
CVE-2004-2467
CVE-2004-2467 affects Easy Chat Server 1.2 (component: chat.ghp). The description from CVE records states that remote attackers can add a large number of fake users, eventually causing a denial of service (server crash). The connected documents corroborate this description across NVD and CVE list...
CVE-2004-2466
CVE-2004-2466 affects Easy Chat Server. Public material shows a remote buffer overflow in the username/authentication handling that can crash the server (denial of service). Historical details reference v1.2 and later reports indicate v2.2 is affected; multiple exploit chains exist for Easy Chat ...