Debian: Security Advisory (DSA-1746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6501

Cross-site scripting XSS vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter...

RedHat Security Advisory RHSA-2009:0345

The remote host is missing updates announced in advisory RHSA-2009:0345. Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

CentOS 3 / 4 : ghostscript (CESA-2009:0345)

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...

argyllcms: Multiple integer overflows in the International Color Consortium Format Library

Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...

Authentication flaw

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5785

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5785

SQL injection vulnerability in V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2008-5785

CVE-2008-5785 affects V3 Chat - Profiles/Dating Script 3.0.2. The vulnerability is a SQL injection in the login mechanism, exploitable via the username and password fields, allowing remote execution of arbitrary SQL commands. The available sources confirm the affected product and the injection ve...

CVE-2008-5784

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-5784

CVE-2008-5784 affects V3 Chat – Profiles/Dating Script 3.0.2. The root cause is an authentication bypass: setting the admin cookie to 1 grants remote attackers administrative access. Impact is described as remote authentication bypass with full admin privileges (per the sources). There is no expl...

Pro Chat Rooms 3.0.2 XSS / XSRF

Pro Chat Rooms Version 3.0.2 XSS/CSRF Vulnerabilties AUTHOR : ZynbER MAiL : ZynbERatGmaildotcom HOME : NoWhere Script WebSite : http://www.prochatrooms.com Version : Pro Chat Rooms Version 3.0.2 EXPLOITS : -==XSS==- http://www.yoursite.com/path/profiles/index.php?gud=XSSED Vulnerable code in...

Sql injection

SQL injection vulnerability in Pro Chat Rooms 3.0.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the gud parameter to 1 profiles/index.php and 2 profiles/admin.php...

V3 Chat Profiles/Dating Script 3.0.2 (Auth Bypass) SQL Injection Vuln

No description provided by source. V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High -------------------------------------------------------------------...

V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln

No description provided by source. + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/";...

v3chatprofiles-insecure.txt

V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/";...

V3 Chat ProfilesDating Script 3.0.2 - Authentication Bypass

V3 Chat ProfilesDating Script 3.0.2 - Authentication Bypass V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High...

V3 Chat ProfilesDating Script 3.0.2 - Insecure Cookie Handling

V3 Chat ProfilesDating Script 3.0.2 - Insecure Cookie Handling + V3 Chat - Profiles/Dating Script v3.0.2 Insecure Cookie Handling Vulnerability + Discovered By : Mountassif Moad + Greetz : All my freind Exploit: javascript:document.cookie = "admin=1; path=/"; milw0rm.com 2008-11-08...

V3 Chat Profiles/Dating Script 3.0.2 - Authentication Bypass

V3 Chat - Profiles/Dating Script v3.0.2 Auth Bypass Vulnerability ----------------------------------------------------------------- Discovered By: d3b4g contact: bl4ckendatgmaildotcom Risk: High --------------------------------------------------------------------- Exploit: USe this information to...

V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ==================================================================== V3 Chat - Profiles/Dating Script 3.0.2 Insecure Cookie Handling Vuln ==================================================================== + V3 Chat - Profiles/Dating Scri...