PHP Live! 3.3 - deptid SQL Injection

PHP Live! 3.3 - deptid SQL Injection , . | | o | | |,---.,---., .,---.,---.,---.,---.,---|,---.,---.| .,---.|/ ---'| || || |,---|| ,---|| | ||---'| | || || \ | ---'---|---|---^---'---^ ---'---' ---' ' ---'---' o PHP Live! 3.3 deptid Remote SQL Injection --== Author ==-- + Author : v3n0m + Contact...

PHP Live! 3.3 - 'deptid' SQL Injection

, . | | o | | |,---.,---., .,---.,---.,---.,---.,---|,---.,---.| .,---.|/ ---'| || || |,---|| ,---|| | ||---'| | || || \ | ---'---|---|---^---'---^ ---'---' ---' ' ---'---' o PHP Live! 3.3 deptid Remote SQL Injection --== Author ==-- + Author : v3n0m + Contact : v3n0m666atlivedotcom + Blog :...

Sql injection

Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands via 1 the $id variable in admin/includes/delecpac.php, 2 $ordorderid variable in payments/paymentreceived.php, 3 $id variable in includes/functions.php, and 4 unspecified...

CVE-2008-6964

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field...

Sql injection

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2008-6964

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2008-6964

CVE-2008-6964 describes an SQL injection vulnerability on the login page of X7 Chat 2.0.5. The vulnerability is triggered through the password field, enabling remote attackers to execute arbitrary SQL commands. The cited sources (NVD entry) confirm the condition as an injection in the authenticat...

CVE-2008-6964: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Easy Chat Server Authentication Request Buffer Overflow

Added: 08/03/2009 Background Easy Chat Server is a web-based chat server for Microsoft Windows. Problem The server is vulnerable to a remote buffer-overflow attack which can be triggered by sending a specially crafted password parameter to chat.ghp. Resolution Easy Chat Server 2.2 and earlier are...

Sql injection

SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6883

SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Open redirect

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

Sql injection

Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...

CVE-2008-6882

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

CVE-2008-6881

Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...

CVE-2008-6883

The CVE-2008-6883 entry corresponds to an SQL injection vulnerability in the Joomla! Live Chat (com_livechat) component 1.0. The flaw is exploitable remotely via the last parameter to getChatRoom.php, enabling arbitrary SQL execution. Connected sources describe multiple SQLi vectors affecting get...

CVE-2008-6883

SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...