CVE-2007-1394

The CVE-2007-1394 entry concerns Flat Chat 2.0. It describes a direct static code injection vulnerability in startsession.php, where the Chat Name field is inserted into online.txt and subsequently included by users.php. The root cause is unsafely incorporating user-provided input into executable...

CVE-2007-1394

Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbitrary PHP code via the Chat Name field, which is inserted into online.txt and included by users.php. NOTE: some of these details are obtained from third party information...

Flat Chat 2.0 (include online.txt) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Flat Chat 2.0 include online.txt Remote Code Execution Vulnerability ====================================================================== .-""""""""-. / Dj7xpl \ | | ...

Flat Chat 2.0 - include online.txt Remote Code Execution

Flat Chat 2.0 - include online.txt Remote Code Execution .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ ++ + + + +=============================================+ + | | + | Portal : Flat Chat | + | Version : 2.0 | + | Author : Dj7xpl | [email protected] | +...

Flat Chat 2.0 - 'include online.txt' Remote Code Execution

.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ ++ + + + +=============================================+ + | | + | Portal : Flat Chat | + | Version : 2.0 | + | Author : Dj7xpl | [email protected] | + | Download : Http://www.undoweb.frih.net | + | Risk :...

seamonkey security update

CentOS Errata and Security Advisory CESA-2007:0077-01 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 26 February 20...

CVE-2006-7036

PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not b...

CVE-2006-7036

PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action parameter. NOTE: this issue was announced by an unreliable researcher, but the vendor is no longer distributing the product, so the original claims can not b...

CVE-2006-7036

The CVE-2006-7036 entry concerns Andys Chat 4.5, where a PHP remote file inclusion in register.php allows arbitrary code execution via the action parameter. The description notes the issue was announced by an unreliable researcher and that the vendor is no longer distributing the product, so the ...

Authentication flaw

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2007-0954

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2006-7011

PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the bannedfile parameter. NOTE: CVE disputes this vulnerability because bannedfile is set to a constant value...

CVE-2007-0954

CVE-2007-0954 affects MOHA Chat 0.1b7 and earlier; the plug-in API can be used without authentication. The available sources state the impact and attack vectors are unknown, with no concrete remediation or exploitation details provided in the documents.

CVE-2007-0954

MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors...

CVE-2006-7011

Summary: CVE-2006-7011 is a PHP remote file inclusion vulnerability affecting the adminips.php file in Develooping Flash Chat. An attacker could trigger arbitrary PHP code execution by supplying a URL in the banned_file parameter. The CVSS 2.0 base metrics indicate a High impact with partial conf...

PT-2007-1290 · Develooping · Develooping Flash Chat

Name of the Vulnerable Software and Affected Versions: Develooping Flash Chat affected versions not specified Description: A remote file inclusion issue in the adminips.php file of Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned file parameter...

CVE-2006-6995

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

CVE-2006-6995

The CVE-2006-6995 issue affects V3 Chat’s mycontacts.php where an authenticated user can alter the membername parameter to gain privileges of another user. The vulnerability is described as a privilege escalation via parameter tampering, enabling access to other user accounts. Sources cited in th...

CVE-2006-6995

mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter...

Security feature bypass

Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of service via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...