X7 Group

X7 Chat

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2012-6047

Exploit
  • EPSS 0.21%
  • Veröffentlicht 27.11.2012 04:49:26
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to ind...

7.5

CVE-2008-6964

Exploit
  • EPSS 0.32%
  • Veröffentlicht 13.08.2009 16:30:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field.

7.5

CVE-2008-4718

  • EPSS 1.54%
  • Veröffentlicht 23.10.2008 20:00:01
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the help_file parameter, a different vector than CVE-2006-215...

6

CVE-2008-0278

Exploit
  • EPSS 0.29%
  • Veröffentlicht 15.01.2008 20:00:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a sm_window action.

4.3

CVE-2007-5982

Exploit
  • EPSS 1.83%
  • Veröffentlicht 15.11.2007 00:46:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/...

7.5

CVE-2006-3851

Exploit
  • EPSS 1.35%
  • Veröffentlicht 25.07.2006 23:04:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the old_prefix parameter.

4.3

CVE-2006-2282

  • EPSS 0.53%
  • Veröffentlicht 10.05.2006 02:14:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php.

6.4

CVE-2006-2156

Exploit
  • EPSS 13.67%
  • Veröffentlicht 03.05.2006 10:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbitrary files via .. (dot dot) sequences in the help_file parameter.