EUVD-2006-2604

Malware in sbrugna...

EUVD-2006-2591

Malware in sbrugna...

CVE-2006-2592

Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2006-2605

Cross-site scripting XSS vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php...

Cross site scripting

Cross-site scripting XSS vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php...

Design/Logic Flaw

Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2006-2605

Cross-site scripting XSS vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php...

CVE-2006-2592

Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2006-2592

The CVE-2006-2592 entry concerns DSChat 1.0, where a vulnerability in the Nickname field allows remote attackers to execute arbitrary PHP code because the field is not sanitized before creating a file in a user directory. The public record includes a CVSS v2 base score of 7.5 (HIGH) with Network ...

CVE-2006-2605

The CVE-2006-2605 entry describes a Cross-site Scripting (XSS) vulnerability in DSChat 1.0 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the chatbox, most likely via the ctext parameter to send.php. This is the scope of what is stated in the...

DSChat <= 1.0 XSS

DSChat = 1.0 XSS Discovered by: Nomenumbra Date: 21/5/2006 impact:moderate possible defacement DSChat is a PHP-based chatscript which does no filtering against XSS whatsoever, thus allowing anyone to insert html or javascript in the chatbox. Nomenumbra...