CVE-2008-6883

The CVE-2008-6883 entry corresponds to an SQL injection vulnerability in the Joomla! Live Chat (com_livechat) component 1.0. The flaw is exploitable remotely via the last parameter to getChatRoom.php, enabling arbitrary SQL execution. Connected sources describe multiple SQLi vectors affecting get...

CVE-2008-6882

CVE-2008-6882 affects the Joomla! Live Chat component (com_livechat) 1.0. The underlying issue is that xmlhttp.php can be used as an open HTTP proxy, allowing remote attackers to forward requests with a full URL in the query string to hide network scanning activities or probe internal networks. T...

CVE-2008-6881

The CVE-2008-6881 entry relates to multiple SQL injection vulnerabilities in the Joomla! Live Chat (com_livechat) 1.0 component. The connected Nessus plugin EU/Nessus plugin specifies that the issue arises from improper sanitization of the user-controlled last parameter in getChat.php and getSave...

CVE-2008-6883: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6882: Improper Input Validation

Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...

CVE-2008-6881: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...