123 Flash Chat Multiple Security Vulnerabilities
BID:42478
Info
123 Flash Chat Multiple Security Vulnerabilities
| Bugtraq ID: | 42478 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 16 2010 12:00AM |
| Updated: | Aug 16 2010 12:00AM |
| Credit: | Lincoln |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
123 Flash Chat Multiple Security Vulnerabilities
123 Flash Chat is prone to multiple security vulnerabilities. These vulnerabilities include a cross-site scripting vulnerability, multiple information-disclosure vulnerabilities, and a directory-traversal vulnerability.
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, obtain sensitive information, or perform unauthorized actions. Other attacks are also possible.
123 Flash Chat 7.8 is vulnerable; other versions may also be affected.
123 Flash Chat is prone to multiple security vulnerabilities. These vulnerabilities include a cross-site scripting vulnerability, multiple information-disclosure vulnerabilities, and a directory-traversal vulnerability.
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, obtain sensitive information, or perform unauthorized actions. Other attacks are also possible.
123 Flash Chat 7.8 is vulnerable; other versions may also be affected.
Exploit / POC
123 Flash Chat Multiple Security Vulnerabilities
Attackers can exploit these issues via a browser.
The following example URIs are available:
Attackers can exploit these issues via a browser.
The following example URIs are available:
Solution / Fix
123 Flash Chat Multiple Security Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
123 Flash Chat Multiple Security Vulnerabilities
References:
References:
- 123 Flash Chat Homepage (TopCMM Software)