Natterchat Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/natterchat/ Sun, 26 Feb 2023 09:11:50 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Natterchat Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/natterchat/ 32 32 CVE-2008-7047 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7047/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7047/ NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp.

The post CVE-2008-7047 appeared first on CVE Vulnerability.

]]> NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete rooms and messages via a direct request to admin/home.asp.

The post CVE-2008-7047 appeared first on CVE Vulnerability.

]]> CVE-2008-7048 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7048/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7048/ Multiple cross-site scripting (XSS) vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) txtUsername parameter to registerDo.asp, as invoked from register.asp, or (2) txtRoomName parameter to room_new.asp. NOTE: these issues might be resultant from XSS in SQL error messages.

The post CVE-2008-7048 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in NatterChat 1.12 allow remote attackers to inject arbitrary web script or HTML via the (1) txtUsername parameter to registerDo.asp, as invoked from register.asp, or (2) txtRoomName parameter to room_new.asp. NOTE: these issues might be resultant from XSS in SQL error messages.

The post CVE-2008-7048 appeared first on CVE Vulnerability.

]]> CVE-2008-7049 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7049/ Sun, 26 Feb 2023 09:11:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7049/ Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the (1) txtUsername parameter (aka Username) and (2) txtPassword parameter (aka Password) in a form generated by home.asp. NOTE: due to lack of details, it is not clear whether this is related to CVE-2004-2206.

The post CVE-2008-7049 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the (1) txtUsername parameter (aka Username) and (2) txtPassword parameter (aka Password) in a form generated by home.asp. NOTE: due to lack of details, it is not clear whether this is related to CVE-2004-2206.

The post CVE-2008-7049 appeared first on CVE Vulnerability.

]]>