80 matches found
FlashChat Role Filter Security Bypass Vulnerability
FlashChat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tufat:flashchat";...
CVE-2008-6799
connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."...
Authentication flaw
connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."...
CVE-2008-6799
CVE-2008-6799 affects FlashChat 5.0.8. The vulnerability allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7" in connection.php. Public sources (e.g., NVD/NIST, OpenVAS NASL) corroborate a security bypass in FlashChat’s r...
CVE-2008-6799
connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative privileges by setting the s parameter to "7."...
flashchat severe bug
File: connection.php if ChatServer::userInRole$this-userid, ROLEADMIN || ChatServer::userInRole$this-userid, ROLEMODERATOR || $req's' == 7 -- bypass line This piece of code allows a normal user to bypass role filtering and to be granted admin role as a normal user. To exploit the vulnerability...
FlashChat - connection.php Role Filter Security Bypass
FlashChat - connection.php Role Filter Security Bypass source: https://www.securityfocus.com/bid/31800/info FlashChat is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions and gain unauthorized administrative access to the...
FlashChat - 'connection.php' Role Filter Security Bypass
source: https://www.securityfocus.com/bid/31800/info FlashChat is prone to a security-bypass vulnerability. An attacker can leverage this vulnerability to bypass certain security restrictions and gain unauthorized administrative access to the affected application...
osdata-lfi.txt
========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...
osData <= 2.08 Modules Php121 Local File Inclusion Vulnerability
No description provided by source. ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...
osData 2.08 Modules Php121 - Local File Inclusion
========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...
osData 2.08 Modules Php121 - Local File Inclusion
osData 2.08 Modules Php121 - Local File Inclusion ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro ,...
ZZ FlashChat <= (help.php) 3.1 Local File Inclusion Vulnerability
No description provided by source. Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI...
ZZ FlashChat <= (help.php) 3.1 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= ZZ FlashChat = help.php 3.1 Local File Inclusion Vulnerability ================================================================= Title : ZZ:FlashChat Local File Inclusion...
ZZ FlashChat 3.1 - help.php Local File Inclusion
ZZ FlashChat 3.1 - help.php Local File Inclusion Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI milw0rm.com 2007-10-19...
ZZ FlashChat 3.1 - 'help.php' Local File Inclusion
Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI milw0rm.com 2007-10-19...
FlashChat F_CMS 4.7.9 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/24190/info FlashChat is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to execute an arbitrary remote file containing malicious scri...
FlashChat F_CMS 4.7.9 - Multiple Remote File Inclusions
FlashChat FCMS 4.7.9 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/24190/info FlashChat is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
CVE-2007-0834
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...
Cross site scripting
Cross-site scripting XSS vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or HTML via the user name field when the user joins a chat room, a different vulnerability than CVE-2007-0807. NOTE: the provenance of this information is unknown; the details are...