CVE-2006-0418

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

icq-xss.txt

Title: ICQ Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Date: 10 January 2006 MorX Security Research Team http://www.morx.org Service: Web/Chat Vendor: ICQ.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: Medium/High Tested on: Microsoft IE 6.0 and...

123 Flash Chat 5.0 - Remote Code Injection

source: https://www.securityfocus.com/bid/16360/info 123 Flash Chat is prone to an arbitrary code injection weakness. An attacker can influence the value of a variable that is insecurely passed to an 'eval' call. Successful exploitation may allow attackers to take complete control of the...

Directory traversal

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

CVE-2006-0223

CVE-2006-0223 is a directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1. Attackers can create or overwrite arbitrary files on the server by supplying ".." sequences in the username field. The provided documents describe the affected product and the vulnerability...

CVE-2006-0223

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

security flaw

The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service infinite loop...

PT-2006-1226 · Adodb +9 · Adodb +9

Name of the Vulnerable Software and Affected Versions: ADODB versions prior to 4.70 Mantis versions prior to 1.1.0a PostNuke versions prior to 0.764 Moodle versions prior to 1.5.3 Cacti versions prior to 0.8.6i Xaraya versions prior to 0.98 PHPOpenChat versions prior to 1.0.6 MAXdev MD-Pro versio...

CVE-2004-2646

Affected software: Free Web Chat 2.0. Vulnerable component: addUser function in UserManager.java. Root cause: input condition where usrName is null leads to an uncaught NullPointerException, resulting in a denial of service. Exploit details, impact, and remediation are not provided beyond this de...

CVE-2004-2647

CVE-2004-2647 concerns Free Web Chat 2.0, where remote attackers can cause a denial of service by opening multiple connections from the same user, leading to CPU consumption and partial availability impact. The available records identify the affected product as Free Web Chat 2.0 and describe the ...

CVE-2004-2647

Free Web Chat 2.0 allows remote attackers to cause a denial of service CPU consumption via multiple connections from the same user...

CVE-2002-2173

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

EUVD-2002-2152

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

CVE-2005-3505

Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...

CVE-2005-3505

CVE-2005-3505 describes a cross-site scripting (XSS) flaw in the Entropy Chat script used by cPanel versions 10.2.0-R82 and 10.6.0-R137. The underlying issue is that a chat message containing JavaScript in style attributes within tags such as can be processed by Internet Explorer, enabling remot...

Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability

====================================================================== Secunia Research 04/11/2005 - cPanel Entropy Chat Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

Direct Connect hub detection

A Direct Connect 'hub' or server is running on this port. Direct Connect is a protocol used for peer-to-peer file-sharing as well as chat, and a hub routes communications among peers. While any type of file may be shared, Direct Connect hubs often handle movies, images, music files, and games,...

PT-2005-4124 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.13 Description: The issue is related to the IRC protocol dissector, which allows remote attackers to cause a denial of service by triggering an infinite loop. Recommendations: For Ethereal version 0.10.13, consider...

mwchat.txt

20.23 21/10/2005 MWCHAT 6.8 SQL INJECTION / REMOTE COMMANDS EXECUTION software: site: http://www.appindex.net description: a php chat no need for exploit code, poc:...

AlstraSoft E-Friends Remote Command Exucetion

AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...