Lucene search
+L

46 matches found

Prion
Prion
•added 2006/01/09 11:03 p.m.•38 views

Design/Logic Flaw

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

7.5CVSS7.7AI score0.13065EPSS
SaveExploits2References30Affected Software5
UbuntuCve
UbuntuCve
•added 2006/01/09 11:03 p.m.•45 views

CVE-2006-0147

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

7.5CVSS6.2AI score0.13065EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2006/01/09 11:00 p.m.•44 views

CVE-2006-0147

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

7.3AI score0.13065EPSS
SaveExploits2References30
Cvelist
Cvelist
•added 2005/08/10 4:00 a.m.•30 views

CVE-2005-2545

Multiple cross-site scripting XSS vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content parameter to profile.php and profilemisc.php, 3 the profile fields in userpage.php, 4 subject or 5 body in mail.php, or 8...

5.8AI score0.01716EPSS
SaveExploits0References10
CVE
CVE
•added 2005/08/10 4:00 a.m.•57 views

CVE-2005-2545

PHPOpenChat 3.0.2 is affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary script or HTML via parameters in profile.php, profile_misc.php, userpage.php, mail.php, and invite.php (e.g., title/content, profile fields, subject/body, di...

4.3CVSS6AI score0.01716EPSS
SaveExploits0References10Affected Software1
NVD
NVD
•added 2005/08/10 4:00 a.m.•23 views

CVE-2005-2545

Multiple cross-site scripting XSS vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content parameter to profile.php and profilemisc.php, 3 the profile fields in userpage.php, 4 subject or 5 body in mail.php, or 8...

4.3CVSS5.8AI score0.01716EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/08/10 12:00 a.m.•3 views

CVE-2005-2545: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 content parameter to profile.php and profilemisc.php, 3 the profile fields in userpage.php, 4 subject or 5 body in mail.php, or 8...

4.3CVSS5.9AI score0.01716EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2005/08/06 12:00 a.m.•30 views

[HSC Security Group] Multiple XSS in phpopenchat 3.0.2

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Multiple XSS in phpopenchat 3.0.2 Risk: Medium to High "PHPOpenChat is a high performance php-based chat server software for a live chat-room or -module on every php-based site." 1. permanent XSS hole in...

6.1AI score
SaveExploits0
NVD
NVD
•added 2005/05/02 4:00 a.m.•26 views

CVE-2005-0863

Cross-site scripting XSS vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via 1 the chatter parameter to regulars.php or 2 the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php...

4.3CVSS5.7AI score0.01703EPSS
SaveExploits1References4
NVD
NVD
•added 2005/05/02 4:00 a.m.•51 views

CVE-2005-0862

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter to 1 pocloginform.php or 2 phpbb/poc.php, the pocrootpath parameter to 3 phpbb/poc.php, 4 phpnuke/ENGLISHpoc.php, 5...

7.5CVSS7.7AI score0.10918EPSS
SaveExploits4References10
CVE
CVE
•added 2005/03/24 5:00 a.m.•256 views

CVE-2005-0862

PHPOpenChat versions 3.0.1 and earlier are vulnerable to multiple Remote File Inclusion (RFI) flaws. An attacker can exploit these vulnerabilities to execute arbitrary PHP code on the server with the privileges of the webserver process. The issues stem from improper handling of several parameters...

7.5CVSS8.1AI score0.10918EPSS
SaveIn wildExploits4References10Affected Software1
Cvelist
Cvelist
•added 2005/03/24 5:00 a.m.•30 views

CVE-2005-0863

Cross-site scripting XSS vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via 1 the chatter parameter to regulars.php or 2 the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php...

5.7AI score0.01703EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2005/03/24 5:00 a.m.•36 views

CVE-2005-0862

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter to 1 pocloginform.php or 2 phpbb/poc.php, the pocrootpath parameter to 3 phpbb/poc.php, 4 phpnuke/ENGLISHpoc.php, 5...

7.7AI score0.10918EPSS
SaveExploits4References10
CVE
CVE
•added 2005/03/24 5:00 a.m.•63 views

CVE-2005-0863

PHPOpenChat v3.x contains an XSS vulnerability that allows remote attackers to inject arbitrary script/HTML through (1) chatter in regulars.php or (2) chatter, chatter1, chatter2, chatter3, or chatter4 in register.php. This can lead to client-side script execution and partial integrity impact wit...

4.3CVSS6AI score0.01703EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/24 12:00 a.m.•3 views

CVE-2005-0863: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via 1 the chatter parameter to regulars.php or 2 the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php...

4.3CVSS6AI score0.01703EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/24 12:00 a.m.•7 views

CVE-2005-0862: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter to 1 pocloginform.php or 2 phpbb/poc.php, the pocrootpath parameter to 3 phpbb/poc.php, 4 phpnuke/ENGLISHpoc.php, 5...

7.5CVSS6.4AI score0.10918EPSS
SaveExploits4References1
Packet Storm
Packet Storm
•added 2005/03/22 12:00 a.m.•51 views

phpOpenChat.txt

PersianHacker.NET 200503-09PHPOpenChat v3.X XSS Multiple Vulnerability Date: 2005 March Bug Number: 09 PHPOpenChat is a high performance php-based chat server software for a live chat-room or -module on every php-based site. More info @: http://phpopenchat.org/ Discussion: -------------------- Th...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/03/18 12:00 a.m.•28 views

[PersianHacker.NET 200503-09]PHPOpenChat v3.x XSS Multiple Vulnerability

PersianHacker.NET 200503-09PHPOpenChat v3.X XSS Multiple Vulnerability Date: 2005 March Bug Number: 09 PHPOpenChat is a high performance php-based chat server software for a live chat-room or -module on every php-based site. More info @: http://phpopenchat.org/ Discussion: -------------------- Th...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2005/03/18 12:00 a.m.•37 views

PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/12841/info PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

4.3CVSS5.8AI score0.01703EPSS
SaveExploits1
securityvulns
securityvulns
•added 2005/03/17 12:00 a.m.•542 views

[SA14600] PHPOpenChat "sourcedir" File Inclusion Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

0.4AI score
SaveExploits0
Rows per page
Query Builder