80 matches found
CVE-2019-16948
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network as opposed to what general web traffic would see...
Server side request forgery (ssrf)
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network as opposed to what general web traffic would see...
CVE-2019-16948
CVE-2019-16948 is an SSRF vulnerability in Enghouse Web Chat 6.1.300.31. In any POST request, an attacker can replace the port in WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to infer what is visible on the internal network, as the response differs between open an...
CVE-2019-16948
An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/UCWebServices/ with a range of ports to determine what is visible on the internal network as opposed to what general web traffic would see...
QIWI: Nickname disclosure through web-chat
Nickname disclosure through web-chat...
CVE-2018-5978
SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...
Simple keitai chat vulnerable to cross-site scripting
Overview Simple keitai chat provided by LEMON-S PHP contains reflected and stored cross-site scripting vulnerabilities CWE-79. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
Simple Chat Cross-Site Scripting Vulnerability
Simple Chat is a PHP and MySQL based Web chat program . A cross-site scripting vulnerability exists in versions of Simple Chat prior to 2016/08/15. An attacker can exploit this vulnerability to execute arbitrary script code...
Web Chat Manager 2.0 HTML Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7190/info It has been reported that Web Chat Manager is prone to HTML injection attacks. This problem occurs due to insufficient sanitization of user-supplied input. As a result of this insufficiency an attacker may embed...
Free Web Chat Initial Release Connection Saturation DoS
No description provided by source. source: http://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient...
Free Web Chat Initial Release UserManager.java Null Pointer DoS
No description provided by source. source: http://www.securityfocus.com/bid/10863/info Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported: The first denial of service vulnerability reported results from a lack of sufficient...
Joomla! Component com_bc Cross Script Scripting (XSS) Vulnerability
===================================================================== Joomla! Component combc Cross Script Scripting XSS Vulnerability ===================================================================== 1. OVERVIEW The Joomla! Component combc was vulnerable to Cross Script Scripting XSS...
CVE-2004-2647
CVE-2004-2647 concerns Free Web Chat 2.0, where remote attackers can cause a denial of service by opening multiple connections from the same user, leading to CPU consumption and partial availability impact. The available records identify the affected product as Free Web Chat 2.0 and describe the ...
CVE-2004-2646
Affected software: Free Web Chat 2.0. Vulnerable component: addUser function in UserManager.java. Root cause: input condition where usrName is null leads to an uncaught NullPointerException, resulting in a denial of service. Exploit details, impact, and remediation are not provided beyond this de...
CVE-2004-2647
Free Web Chat 2.0 allows remote attackers to cause a denial of service CPU consumption via multiple connections from the same user...
CVE-2004-2647
Free Web Chat 2.0 allows remote attackers to cause a denial of service CPU consumption via multiple connections from the same user...
CVE-2004-2646
The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service uncaught NullPointerException via unknown attack vectors that cause the usrName variable to be null...
Multiple Vulnerabilities in Free Web Chat
Donato Ferrante Application: Free Web Chat http://sourceforge.net/projects/freewebchat/ Version: Initial Release Bugs: Multiple Vulnerabilities Date: 04-Aug-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...
CSS in PHP WEB CHAT
Product: PHP WEB CHAT Version: 2.0 OffSite: http://www.webscriptworld.com Problem: Cross Site Scripting -------------------------------------------- Actions: 1Register http://victim/chatdir/register.php?register=yes&username=OverG&email=scrptalert20"Test!"/scrpt&email1=scrptalert20"Test!"/scrpt 2...
Web Chat Manager 2.0 - HTML Code Injection
source: https://www.securityfocus.com/bid/7190/info It has been reported that Web Chat Manager is prone to HTML injection attacks. This problem occurs due to insufficient sanitization of user-supplied input. As a result of this insufficiency an attacker may embed HTML code via a HTML form field o...