CVE-2008-7049

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...

CVE-2008-5602

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

Improper access control

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

CVE-2008-5602

Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for natterchat112.mdb...

CVE-2008-5602

CVE-2008-5602 affects Natterchat 1.12, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database file (natterchat112.mdb) via a direct request. The sources explicitly describe the file exposure and lack of access rest...

NatterChat 1.12 Database Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Natterchat Version : v1.12...

NatterChat 1.12 (natterchat112.mdb) Database Disclosure Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script...

Natterchat 1.12 - Database Disclosure

Natterchat 1.12 - Database Disclosure -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ...

Natterchat 1.12 - Database Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Natterchat Version : v1.12...

NatterChat 1.12 (natterchat112.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== NatterChat 1.12 natterchat112.mdb Database Disclosure Vulnerability =====================================================================...

Natterchat 1.12 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. + Script Name : Natterchat v1.12 Auth Bypass Remote SQL Injection Vulnerability + Author : Mountassif Moad + Dork : Powered by Natterchat v1.12 + Expl0iT : 1 Go to the Login page http://www.site.il/chat/nattechat/home.asp 2 Username : admin Password : ' or '1'='...

NatterChat 1.1 Remote Admin Bypass Vulnerability

No description provided by source. ============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad =...

Natterchat 1.1 - Authentication Bypass

Natterchat 1.1 - Authentication Bypass + Script Name : NATTERCHAT v1.1 remote login bypass + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by NATTERCHAT v 1.1 --//-- + Expl0iT : 1 Go to the Login page...

Natterchat 1.1 - Remote Authentication Bypass

Natterchat 1.1 - Remote Authentication Bypass ============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover:...

Natterchat 1.12 - Authentication Bypass

Natterchat 1.12 - Authentication Bypass + Script Name : Natterchat v1.12 Auth Bypass Remote SQL Injection Vulnerability + Author : Mountassif Moad + Dork : Powered by Natterchat v1.12 + Expl0iT : 1 Go to the Login page http://www.site.il/chat/nattechat/home.asp 2 Username : admin Password : ' or...

NatterChat 1.1 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== NatterChat 1.1 Auth Bypass Remote SQL Injection Vulnerability ===============================================================...

NatterChat 1.1 Remote Admin Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================ NatterChat 1.1 Remote Admin Bypass Vulnerability ================================================ ============================================================================== NATTERCHAT v1...

Natterchat 1.12 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Natterchat 1.12 Auth Bypass Remote SQL Injection Vulnerability ================================================================ + Script Name : Natterchat v1.12 Auth Bypass...

natterchat-sql.txt

Script Name : Natterchat v1.12 Auth Bypass Remote SQL Injection Vulnerability + Author : Mountassif Moad + Dork : Powered by Natterchat v1.12 + Expl0iT : 1 Go to the Login page http://www.site.il/chat/nattechat/home.asp 2 Username : admin Password : ' or '1'='1 Live Demo...

NatterChat 1.1 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. + Script Name : NATTERCHAT v1.1 remote login bypass + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by NATTERCHAT v 1.1 --//-- + Expl0iT : 1 Go to the Login page http://www.exemple.ff/chat/nattechat/home.asp ...