RSS   Vulnerabilities for 'Voodoo chat'   RSS

2006-12-31
 
CVE-2006-6890

 

 
Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat.

 
2006-08-04
 
CVE-2006-3991

 

 
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter.

 


Copyright 2024, cxsecurity.com

 

Back to Top