Lucene search
+L

9939 matches found

zdt
zdt
•added 2012/12/12 12:00 a.m.•29 views

MyBB AJAX Chat Persistent XSS Vulnerability

Exploit for php platform in category web applications Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Category: Webapps Version: 1 Tested on: Windows The Persiste...

7.1AI score
SaveExploits0
zdt
zdt
•added 2012/12/09 12:00 a.m.•28 views

MyBB KingChat Plugin Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2012/12/09 12:00 a.m.•37 views

MyBB KingChat Plugin - Persistent Cross-Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/12/08 12:00 a.m.•27 views

MyBB Kingchat Cross Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/12/04 12:00 a.m.•31 views

Fedora Update for weechat FEDORA-2012-18526

Check for the Version of weechat OpenVAS Vulnerability Test Fedora Update for weechat FEDORA-2012-18526 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

7.5CVSS0.1AI score0.04442EPSS
SaveExploits0References2
NVD
NVD
•added 2012/11/27 4:49 a.m.•25 views

CVE-2012-6047

Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...

6.8CVSS7.2AI score0.00948EPSS
SaveExploits2References1
Prion
Prion
•added 2012/11/27 4:49 a.m.•30 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...

6.8CVSS7.7AI score0.00948EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2012/11/27 2:00 a.m.•37 views

CVE-2012-6047

Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...

7.2AI score0.00948EPSS
SaveExploits2References1
CVE
CVE
•added 2012/11/27 2:00 a.m.•59 views

CVE-2012-6047

CVE-2012-6047 is a CSRF vulnerability in X7 Chat

6.8CVSS7.4AI score0.00948EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/27 12:00 a.m.•6 views

CVE-2012-6047: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...

6.8CVSS6AI score0.00948EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2012/11/27 12:00 a.m.•5 views

PT-2012-6238

Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.5.1 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the "users page" in an "adminpane...

6.8CVSS0.00948EPSS
SaveExploits2References4
OSV
OSV
•added 2012/11/23 8:55 p.m.•11 views

DEBIAN-CVE-2012-2086

SQL injection vulnerability in the getlastconversationlines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter...

7.5CVSS8.8AI score0.02403EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2012/10/06 12:00 a.m.•27 views

et-chat SQL Injection

Exploit Title : et-chat schreiben blind SQL Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum/ Software Link : http://et-chat.ir/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Powered By...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2012/10/05 12:00 a.m.•27 views

Et-Chat Rank SQL Injection

Exploit Title : Et-Chat Rank SQL Injection Vulnerability Author : Ashiyane Digital Security Team Designed By : Remove Home : http://ashiyane.org/ Software Link : http://et-chat.ir/ Security Risk : High - SQL Injection Version : All Version Dork : inurl : ÓíÓÊã ÇãÊíÇÒ Ïåí Exploit : 1 . Search This...

0.1AI score
SaveExploits0
Prion
Prion
•added 2012/09/20 10:55 a.m.•21 views

Cross site scripting

Cross-site scripting XSS vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information...

4.3CVSS6.3AI score0.10428EPSS
SaveExploits2References5Affected Software1
Mend
Mend
•added 2012/09/20 10:00 a.m.•1 views

CVE-2011-5181

Cross-site scripting XSS vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information...

6.3CVSS0.10428EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/20 12:00 a.m.•2 views

CVE-2011-5181: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information...

4.3CVSS6AI score0.10428EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2012/09/20 12:00 a.m.•5 views

PT-2012-2158

Name of the Vulnerable Software and Affected Versions ClickDesk Live Support - Live Chat plugin version 2.0 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter in the clickdesk.php file. This could potentially lead t...

4.3CVSS0.10428EPSS
SaveExploits2References8
Tenable Nessus
Tenable Nessus
•added 2012/09/06 12:00 a.m.•37 views

Mandriva Linux Security Advisory : pidgin (MDVSA-2012:029)

Multiple vulnerabilities has been discovered and corrected in pidgin : The pidginconvchatrenameuser function in gtkconv.c in Pidgin before 2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash by changing a nickname while in an XMPP chat room...

6.4CVSS5.4AI score0.03509EPSS
SaveExploits1References5
NVD
NVD
•added 2012/08/17 10:31 a.m.•35 views

CVE-2012-3308

Cross-site scripting XSS vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat...

4.3CVSS5.6AI score0.01792EPSS
SaveExploits0References4
Rows per page
Query Builder