EUVD-2006-6512

Malware in sbrugna...

EUVD-2006-6511

Malware in sbrugna...

CVE-2006-6529

The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview...

SA-CONTRIB-2011-008 - Chatroom - Cross Site Scripting (XSS) and Cross Site Request Forgery

The Chatroom module provides real-time chat capabilities to Drupal. Vulnerability: Cross Site Scripting The module does not properly escape the contents of chat messages in pages listing the chats contained in a chatroom, leading to a Cross Site Scripting XSS vulnerability. Any user with permissi...

CVE-2006-6528

The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges...

CVE-2006-6529

The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview...

CVE-2006-6528

CVE-2006-6528 affects the Drupal Chatroom Module (versions before 4.7.x.-1.0). The vulnerability arises because the module broadcasts visitors’ session IDs to all participants, enabling remote attackers to hijack sessions and gain privileges. The published description explicitly states the impact...

CVE-2006-6528

The Chatroom Module before 4.7.x.-1.0 for Drupal broadcasts Chatroom visitors' session IDs to all participants, which allows remote attackers to hijack sessions and gain privileges...

CVE-2006-6529

The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview...

CVE-2006-6529

CVE-2006-6529 affects the Drupal Chatroom Module in versions before 4.7.x-1.0. The vulnerability arises because the module displays private messages in the chatroom’s last messages overview, allowing remote attackers to read sensitive information via the overview. Impact: information disclosure o...

[SA23343] Drupal Chatroom Module Session ID Information Disclosure

TITLE: Drupal Chatroom Module Session ID Information Disclosure SECUNIA ADVISORY ID: SA23343 VERIFY ADVISORY: http://secunia.com/advisories/23343/ CRITICAL: Moderately critical IMPACT: Hijacking, Exposure of sensitive information WHERE: From remote SOFTWARE: Drupal Chatroom Module 4.x...