EUVD-2005-3323

Malware in sbrugna...

EUVD-2005-1871

Malware in sbrugna...

EUVD-2006-5887

Malware in sbrugna...

MWChat 6.7 Start_Lobby.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13849/info MWChat is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

MWChat 6.8 Chat.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15198/info MWChat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

CVE-2006-5904

Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGMWCHATLibs parameter to 1 about.php, 2 buddy.php, 3 chat.php, 4 dialog.php, 5 head.php, 6 help.php, 7 index.php, and 8 license.php, different vectors th...

CVE-2006-5904

CVE-2006-5904 covers multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0, enabling an attacker to execute arbitrary PHP code by supplying a crafted URL to CONFIG[MWCHAT_Libs] in one of eight scripts (about.php, buddy.php, chat.php, dialog.php, head.php, help.php, index.php, licen...

CVE-2006-5904

Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGMWCHATLibs parameter to 1 about.php, 2 buddy.php, 3 chat.php, 4 dialog.php, 5 head.php, 6 help.php, 7 index.php, and 8 license.php, different vectors th...

mwchat-rfi.txt

MWChat pro V 7.0 Class = Remote File Inclusion URL : http://www.appindex.net/products/download/?product=mwchat&version=7.0 Found by = Mr.3FReeT .. code in :. about.php , buddy.php , chat.php , dialog.php , head.php , help.php , index.php , license.php ..... nearly all :D...

MWChat pro V 7.0 <= (CONFIG[MWCHAT_Libs]) Remote File Include Vulnerability

MWChat pro V 7.0 Class = Remote File Inclusion URL : http://www.appindex.net/products/download/?product=mwchat&version=7.0 Found by = Mr.3FReeT .. code in :. about.php , buddy.php , chat.php , dialog.php , head.php , help.php , index.php , license.php ..... nearly all :D...

CVE-2005-3324

SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2005-3324

SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2005-3324

CVE-2005-3324 affects MWChat 6.8 (chat.php). The vulnerability is an SQL injection via the username parameter that allows remote execution of arbitrary SQL commands. Exploitation details are not provided in the supplied documents; CVSS base score is 7.5 (High). A remediation mentioned in the conn...

[SA17303] MWChat "Username" SQL Injection Vulnerability

TITLE: MWChat "Username" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17303 VERIFY ADVISORY: http://secunia.com/advisories/17303/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MWChat 6.x http://secunia.com/product/5210/ DESCRIPTION: rgod has reporte...

CVE-2005-1869

PHP remote file inclusion vulnerability in startlobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIGMWCHATLibs parameter...

CVE-2005-1869

MWChat 6.x contains a PHP remote code execution via start_lobby.php through the CONFIG[MWCHAT Libs] parameter. The vulnerability affects the start_lobby.php file and can lead to arbitrary PHP execution by an attacker. The PT-2005-2826 advisory notes restricting access to start_lobby.php and avoid...

CVE-2005-1869

PHP remote file inclusion vulnerability in startlobby.php in MWChat 6.x allows remote attackers to execute arbitrary PHP code via the CONFIGMWCHATLibs parameter...

PT-2005-2826 · Mwchat · Mwchat

Name of the Vulnerable Software and Affected Versions: MWChat versions 6.x Description: The issue allows remote attackers to execute arbitrary PHP code via the CONFIGMWCHAT Libs parameter in the start lobby.php file. Recommendations: For MWChat version 6.x, consider restricting access to the star...

MWChat 6.7 - 'Start_Lobby.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13849/info MWChat is affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affect...

[SA15596] MWChat "CONFIG[MWCHAT_Libs]" File Inclusion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...