CVE-2008-5279

The Local ZIM Server zcs.exe in Zilab Chat and Instant Messaging ZIM Server 2.1 and earlier allow remote attackers to execute arbitrary code via 1 heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and 2 a stack-based buffer overflow with ...

CVE-2008-5280

The Local ZIM Server in Zilab Chat and Instant Messaging ZIM Server 2.0 and 2.1 allows remote attackers to cause a denial of service NULL pointer dereference via crafted requests without required parameters...

CVE-2008-5280

The CVE-2008-5280 vulnerability affects the Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0/2.1. It allows remote attackers to cause a denial of service (NULL pointer dereference) through crafted requests without required parameters. The OpenVAS/NVD records corroborate this ...

CVE-2008-5279

The CVE-2008-5279 entry concerns the Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier, where remote attackers can trigger arbitrary code execution via (1) heap-based buffer overflows from long room names or source accounts, and (2) a stack-based overflow...

x7chat-sql.txt

Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 42 my target bug number: 100...

CVE-2008-5070

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

Sql injection

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

CVE-2008-5070

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

CVE-2008-5070

Pro Chat Rooms 3.0.3 is affected by an SQL injection vulnerability when magic_quotes_gpc is disabled. An attacker can remotely execute arbitrary SQL commands via the gud parameter in profiles/index.php and profiles/admin.php. The vulnerability impacts confidentiality, integrity, and availability ...

X7 Chat 2.0.5 - Authentication Bypass

X7 Chat 2.0.5 - Authentication Bypass Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now...

X7 Chat 2.0.5 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= X7 Chat 2.0.5 Auth Bypass SQL Injection Vulnerability ======================================================= Powered By X7 Chat 2.0.5 auth bypass...

X7 Chat 2.0.5 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 4...

X7 Chat 2.0.5 - Authentication Bypass

Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 42 my target bug number: 100...

v3chatprofiles-insecure.txt

V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/";...

v3chatlivesupport-insecure.txt

! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! O...

V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln

No description provided by source. + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/";...

V3 Chat Profiles/Dating Script 3.0.2 (Auth Bypass) SQL Injection Vuln

No description provided by source. V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High -------------------------------------------------------------------...

V3 Chat Live Support 3.0.4 Insecure Cookie Handling Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! !...

V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ==================================================================== V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln ==================================================================== + V3 Chat - Profiles/Dating Scri...

v3chat-sql.txt

V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ---------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High ----------------------------------------------------------- Exploit: username: ' or ' 1=1 password: ' or ' 1=...