8 matches found
CVE-2006-2282
The CVE-2006-2282 entry describes an XSS vulnerability in X7 Chat 2.0.2 and earlier where a crafted javascript: URI in the avatar URL (likely related to the avatar parameter in register.php) allows remote attackers to inject arbitrary web script or HTML. Public details include a CVSS v2 base scor...
CVE-2007-5982
X7 Chat 2.0.4/2.0.5 (and possibly other versions) contains multiple XSS vulnerabilities that let remote attackers inject arbitrary script/HTML via three parameters: (1) room in sources/frame.php, (2) theme_c in help/index.php, and (3) INSTALL_X7CHATVERSION in upgradev1.php. Impact is described as...
CVE-2006-2156
CVE-2006-2156: Directory traversal in X7 Chat (2.0 and earlier) allows remote inclusion of arbitrary files via .. sequences in the help_file parameter of help/index.php (unsanitized input used in include). Related entry CVE-2008-4718 describes a different vector in help/mini.php for 2.0.1 A1 and ...
CVE-2008-0278
CVE-2008-0278: X7 Chat (2.0.5 and possibly earlier) is vulnerable to SQL injection via the day parameter in index.php when page is set to event (sm_window action). The vulnerability allows remote attackers to manipulate database queries, potentially disclosing data, bypassing authentication, or m...
CVE-2006-3851
The CVE-2006-3851 entry covers an SQL injection in upgradev1.php for X7 Chat 2.0.4 and earlier, exploitable via the old_prefix parameter to execute arbitrary SQL commands remotely. Affected product: X7 Chat (PHP-based web chat). Root cause: improper sanitization of the old_prefix input before use...
CVE-2008-4718
CVE-2008-4718 affects X7 Chat 2.0.1 A1 and earlier. A directory traversal vulnerability in help/mini.php allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the help_file parameter. Root cause is unsanitized input used in a file include. No re...
CVE-2008-6964
CVE-2008-6964 describes an SQL injection vulnerability on the login page of X7 Chat 2.0.5. The vulnerability is triggered through the password field, enabling remote attackers to execute arbitrary SQL commands. The cited sources (NVD entry) confirm the condition as an injection in the authenticat...