7765 matches found
Kil13r-SA-20060701-3.txt
Title: Kil13r-SA-20060701-3 Massting Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/30 - Discovery 2006/06/30 - Vendor notification 2006/06/30 - Vendor response 2006/06/30 - Vendor fix 2006/07/01 - Release Affected version: Not...
MSN Messnger chat history intercepted and the encryption-vulnerability warning-the black bar safety net
MSN Messenger is the Microsoft Corp launched instant messaging software. MSN Messenger with its excellent performance and easy operation, it has been among the of currently the world's most widely used IM softwareinstant messaging software, in domestic also has many users, is the only one can and...
develooping.txt
Develooping Flash Chat bannedfile Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Include : http://www.target.com/path/chat/adminips.php?bannedfile=CmdShell /SpC-x...
jitakz.txt
Ji-takz Chat mycfg Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Include : http://www.target.com/path/tag.class.php?mycfg=H /SpC-x...
andysChat.txt
Andys Chat 4.5 action Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Inclusion : http://www.victim.net/path/register.PHP?action=CMD-Script /SpC-x...
No smoke of war: a network is disabled with the breakthrough limit-vulnerability warning-the black bar safety net
Now, in order to improve work efficiency, many units want to do, including ç˝çŚ stop users use QQ, MSN, lianzhong and other chat software; at the same time, lonely users also find ways to deal with these measures. The two-phase contest, who stands where. it? For QQ, MSN, ourgame such as chat and...
V3 Chat Instant Messenger - profile.php?site_id Cross-Site Scripting
V3 Chat Instant Messenger - profile.php?siteid Cross-Site Scripting source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...
V3 Chat Instant Messenger - expire.php?cust_name Cross-Site Scripting
V3 Chat Instant Messenger - expire.php?custname Cross-Site Scripting source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitiz...
alipager xss attack
Vendor : www.roostercode.com version : all version! BUG : You can include all html tag ... in chat line ! for example : scriptalert"HI users!"/script +++++...
Ji-takz Chat (mycfg) Remote File Inclusion
Ji-takz Chat mycfg Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Include : http://www.target.com/path/tag.class.php?mycfg=H /SpC-x...
Andys Chat 4.5 (action) Remote File Inclusion
Andys Chat 4.5 action Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Inclusion : http://www.victim.net/path/register.PHP?action=CMD-Script /SpC-x...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...
ChatPat v1.0
ChatPat v1.0 Homepage: http://calendarscripts.info/download-3.html Description: An online chat room that lets users chat with each other. Effected files: fastchat.php fastshow.php The nickname input form doesn't sanatize user input before it adds it to the db. In turn this can cause SQL query...
phpRaid "view.php" XSS Vulnerability
phpRaid "view.php" XSS Vulnerability Script : phpRaid Script Website : http://www.spiffyjr.com/ Version : phpRaid v2.9.5 This Xss Works On phpRaid Exploit ; 1- Http://www.example.com/phpRaid/view.php?scriptalert'Xss20Vulnerability';/script 2-...
AspBB Forum "profile.asp & default.asp" XSS Vulnerability
This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="scriptalert'Xss Vulnerability';/script http://www.example.com/profila.asp?get="scriptalert'Xss Vulnerability';/script&URL=2FDefault2Easp3F TeufeL // Netkabus.Com...
Cross site scripting
Cross-site scripting XSS vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php...
CVE-2006-2282
The CVE-2006-2282 entry describes an XSS vulnerability in X7 Chat 2.0.2 and earlier where a crafted javascript: URI in the avatar URL (likely related to the avatar parameter in register.php) allows remote attackers to inject arbitrary web script or HTML. Public details include a CVSS v2 base scor...
x7chatphp.txt
!/usr/bin/php -q -d shortopentag=on works regardless of magicquotesgpc settings\r\n"; echo " if avatar uploads are enabled default\r\n"; echo "dork: intitle:"X7 Chat Help Center" | "Powered By X7 Chat"\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host:...
CVE-2006-2156
Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. dot dot sequences in the helpfile parameter...
Directory traversal
Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. dot dot sequences in the helpfile parameter...