CVE-2008-6881

The CVE-2008-6881 entry relates to multiple SQL injection vulnerabilities in the Joomla! Live Chat (com_livechat) 1.0 component. The connected Nessus plugin EU/Nessus plugin specifies that the issue arises from improper sanitization of the user-controlled last parameter in getChat.php and getSave...

CVE-2008-6883

The CVE-2008-6883 entry corresponds to an SQL injection vulnerability in the Joomla! Live Chat (com_livechat) component 1.0. The flaw is exploitable remotely via the last parameter to getChatRoom.php, enabling arbitrary SQL execution. Connected sources describe multiple SQLi vectors affecting get...

CVE-2008-6882

CVE-2008-6882 affects the Joomla! Live Chat component (com_livechat) 1.0. The underlying issue is that xmlhttp.php can be used as an open HTTP proxy, allowing remote attackers to forward requests with a full URL in the query string to hide network scanning activities or probe internal networks. T...