EUVD-2002-1828

Malware in sbrugna...

EUVD-2004-1562

Malware in sbrugna...

CVE-2002-1849

ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with...

CVE-2004-1568

Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C hex-encoded dot dot in the URL...

CVE-2004-1568

CVE-2004-1568 affects ParaChat Server 5.5. The vulnerability is a directory traversal in the server’s URL handling, exploited via a hex-encoded dot-dot (e.g., ..%5C) to read arbitrary files. The NVD entry lists medium severity (CVSSv2 base score 5.0) with network attack vector and no authenticati...

CVE-2004-1568

Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C hex-encoded dot dot in the URL...

parachat55.txt

Donato Ferrante Application: ParaChat Server http://www.parachat.com/ Version: 5.5 Bug: directory traversal Date: 28-Sep-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description...

directory traversal in ParaChat Server 5.5

Donato Ferrante Application: ParaChat Server http://www.parachat.com/ Version: 5.5 Bug: directory traversal Date: 28-Sep-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description...

CVE-2002-1849

ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with...