9935 matches found
[Full-disclosure] PHPMyChat Authentication Bypass
PHPMyChat Authentication Bypass ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ I won't have bothered to post this silly flaw but after seeing the google search result for inurl:phpMyChat.php3 , I thought it would be good idea to keep people informed. I. BACKGROUND phpMyChat is an easy-to-install, easy-to-use...
CVE-2006-0467
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
Code injection
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
CVE-2006-0467
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
CVE-2006-0467
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
CVE-2006-0467: Undefined Security Weakness
Unspecified vulnerability in Pioneers formerly gnocatan before 0.9.49 allows remote attackers to cause a denial of service application crash via long chat messages...
Pioneers game server DoS
Oversized chat message causes game server to crash...
[SA18647] Pioneers Long Chat Message Denial of Service Vulnerability
TITLE: Pioneers Long Chat Message Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18647 VERIFY ADVISORY: http://secunia.com/advisories/18647/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Pioneers 0.x http://secunia.com/product/7175/ DESCRIPTION: Bas Wijnen has...
Sql injection
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
CVE-2006-0418
Affected product: 123 Flash Chat Server 5.0 and 5.1. Vulnerable: eval injection in username handling that allows arbitrary code execution. Root cause: crafted username processed in a way that enables code execution. Impact: potential compromise of confidentiality, integrity, and availability (as ...
CVE-2006-0418
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
icq-xss.txt
Title: ICQ Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Date: 10 January 2006 MorX Security Research Team http://www.morx.org Service: Web/Chat Vendor: ICQ.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity: Medium/High Tested on: Microsoft IE 6.0 and...
CVE-2006-0418: Undefined Security Weakness
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...
123 Flash Chat 5.0 - Remote Code Injection
source: https://www.securityfocus.com/bid/16360/info 123 Flash Chat is prone to an arbitrary code injection weakness. An attacker can influence the value of a variable that is insecurely passed to an 'eval' call. Successful exploitation may allow attackers to take complete control of the...
Directory traversal
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...
CVE-2006-0223
CVE-2006-0223 is a directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1. Attackers can create or overwrite arbitrary files on the server by supplying ".." sequences in the username field. The provided documents describe the affected product and the vulnerability...
CVE-2006-0223
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...
CVE-2006-0223: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...
