X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution

No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

CVE-2008-6964

CVE-2008-6964 describes an SQL injection vulnerability on the login page of X7 Chat 2.0.5. The vulnerability is triggered through the password field, enabling remote attackers to execute arbitrary SQL commands. The cited sources (NVD entry) confirm the condition as an injection in the authenticat...

x7chat-sql.txt

Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 42 my target bug number: 100...

X7 Chat 2.0.5 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= X7 Chat 2.0.5 Auth Bypass SQL Injection Vulnerability ======================================================= Powered By X7 Chat 2.0.5 auth bypass...

X7 Chat 2.0.5 - Authentication Bypass

X7 Chat 2.0.5 - Authentication Bypass Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now...

X7 Chat 2.0.5 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 4...

X7 Chat 2.0.5 - Authentication Bypass

Powered By X7 Chat 2.0.5 auth bypass ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 42 my target bug number: 100...

CVE-2008-0278

CVE-2008-0278: X7 Chat (2.0.5 and possibly earlier) is vulnerable to SQL injection via the day parameter in index.php when page is set to event (sm_window action). The vulnerability allows remote attackers to manipulate database queries, potentially disclosing data, bypassing authentication, or m...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...