EUVD-2006-0425

Malware in sbrugna...

EUVD-2006-0231

Malware in sbrugna...

Sql injection

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username...

CVE-2006-0418

Affected product: 123 Flash Chat Server 5.0 and 5.1. Vulnerable: eval injection in username handling that allows arbitrary code execution. Root cause: crafted username processed in a way that enables code execution. Impact: potential compromise of confidentiality, integrity, and availability (as ...

Directory traversal

Directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." dot dot sequences in the username field...

CVE-2006-0223

CVE-2006-0223 is a directory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1. Attackers can create or overwrite arbitrary files on the server by supplying ".." sequences in the username field. The provided documents describe the affected product and the vulnerability...