9929 matches found
Sql injection
Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...
CVE-2008-6882
Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...
CVE-2008-6881
Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...
CVE-2008-6883
The CVE-2008-6883 entry corresponds to an SQL injection vulnerability in the Joomla! Live Chat (com_livechat) component 1.0. The flaw is exploitable remotely via the last parameter to getChatRoom.php, enabling arbitrary SQL execution. Connected sources describe multiple SQLi vectors affecting get...
CVE-2008-6883
SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-6881
The CVE-2008-6881 entry relates to multiple SQL injection vulnerabilities in the Joomla! Live Chat (com_livechat) 1.0 component. The connected Nessus plugin EU/Nessus plugin specifies that the issue arises from improper sanitization of the user-controlled last parameter in getChat.php and getSave...
CVE-2008-6881
Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...
CVE-2008-6882
Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...
CVE-2008-6883: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-6882: Improper Input Validation
Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...
CVE-2008-6881: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...
RedHat Security Advisory RHSA-2009:1163
The remote host is missing updates announced in advisory RHSA-2009:1163. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...
Joomla Extension UIajaxIM 1.1 JavaScript Execution Vulnerability
No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Extension UIajaxIM 1.1 Javascript Execution + Software : Joomla + Author : 599eme Man + Contact : [email protected]...
PHP Live! 3.2.2 - 'questid' SQL Injection (2)
Original author: Found by Xar of h4ck-y0u, Greets to Don & ViSiOn Modified version: skys Contact: skysbsbatgmail.com !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance ...
CentOS 3 : seamonkey (CESA-2009:1163)
Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...
RHEL 4 : seamonkey (RHSA-2009:1163)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1163 advisory. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the...
PHP Live! 3.2.1/2 (x) Remote Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== PHP Live! 3.2.1/2 x Remote Blind SQL Injection Vulnerability ============================================================== PhpLive 3.2.1/2 x Blind SQL injection -X | |/ / || |...
CVE-2009-2142
Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...
Sql injection
Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 login and 2 senha parameters...