X7 Chat index.php day Parameter SQL Injection

The remote host is running X7 Chat, a web-based chat program written in PHP. The version of X7 Chat installed on the remote host fails to sanitize input to the 'day' parameter of the 'index.php' script when 'page' is set to 'event' before using it in 'sources/infobox.php' to construct database...

X7 Chat <= 2.0.5 (day) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== X7 Chat \w+".findall foundusers=findallusersresponse if lenfoundusers==0: print "Sorry, exploit failed, please review the SQL string and try to change something like tables or wathever"...

X7 Chat 2.0.5 - 'day' SQL Injection

!/usr/bin/python Exploit for xchat 2.0.5 Saca los usuarios y los hash By nonroot - 2008 it's a PoC, please use responsibly import string,urllib import sys,re print "Target host: i.e: http://127.0.0.1/x7chat/" host=rawinput"Target host include http and /: " print "Output file: i.e: salida.txt"...

docebo-exec.txt

getListTable." WHERE browsercode LIKE '%".$browserlanguage."%'"; executeQuery$qtxt; 801. 802. if $q && mysqlnumrows$q 0 803. $row=mysqlfetcharray$q; 804. $res=$row"regionid"; 805. an attacker cuold be inject SQL code through http accept-language header in the query at line 799, but explode functi...

CVE-2007-6315

BarracudaDrive Web Server vulnerability CVE-2007-6315: before version 3.8, remote authenticated users can cause a crash (denial of service) by sending an HTTP request to /eh/chat.ehintf/C that lacks a Connection ID, leading to a NULL pointer dereference. Impact is a partial availability loss per ...

barracudadrive 3.7.2 - Multiple Vulnerabilities

barracudadrive 3.7.2 - Multiple Vulnerabilities Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization...

CVE-2007-6213

CVE-2007-6213 concerns WebED 0.0.9. Multiple directory traversal flaws in mod/chat/index.php allow remote reading of arbitrary files via a .. in the Root and Path parameters, affecting confidentiality (C:P) with no integrity/availability impact stated. CVSS v2 score is 5.0 (Medium) with network a...

WebED 0.0.9 (index.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ WebED 0.0.9 index.php Remote File Disclosure Vulnerability ============================================================ WebED v0.0.9 index.php Remote File Disclosure...

WebED 0.0.9 - 'index.php' Remote File Disclosure

WebED v0.0.9 index.php Remote File Disclosure Vulnerabilities Script : http://heanet.dl.sourceforge.net/sourceforge/ed-engine/WebEDv0.0.9.tar.gz Vuln Code In /mod/chat/index.php : PoC : /mod/chat/index.php?Root=../../../../../../etc/passwd /mod/chat/index.php?Path=../../../../../../etc/pa...

CVE-2007-6085

Multiple cross-site scripting XSS vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the 1 vedipm or 2 livechat module...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...

CVE-2007-5982

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...

CVE-2007-5982

X7 Chat 2.0.4/2.0.5 (and possibly other versions) contains multiple XSS vulnerabilities that let remote attackers inject arbitrary script/HTML via three parameters: (1) room in sources/frame.php, (2) theme_c in help/index.php, and (3) INSTALL_X7CHATVERSION in upgradev1.php. Impact is described as...

CVE-2007-5982

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...

x7-xss.txt

X7 Chat 2.0.4 XSS ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : X7 Chat 2.0.4 ---------- Download : http://www.x7chat.com/releases/v2/x7chat205.zip ---------- Vuln Type: XSS ---------- Registerglobals: ON -----------------...

X7 Chat 2.0.4 - upgradev1.php Cross-Site Scripting

X7 Chat 2.0.4 - upgradev1.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

X7 Chat 2.0.4 - frame.php Cross-Site Scripting

X7 Chat 2.0.4 - frame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

X7 Chat 2.0.4 - 'frame.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

X7 Chat 2.0.4 - 'upgradev1.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Fedora 7 : wesnoth-1.2.7-1.fc7 (2007-2496)

Security fix release: A malicious user could send a long chat message with multibyte characters, the server would truncate the message on a fixed length, without paying attention to the multibyte characters. This led to invalid utf-8 on the client and an uncaught exception was thrown. Note that...