VChat

From: subj (r2subj3ctat_private)
Date: Sat Mar 22 2003 - 18:24:23 PST

  • Next message: Zero_X www.lobnan.de Team: "PHPNuke viewpage.php allows Remote File retrieving"

    
     ('binary' encoding is not supported, stored as-is)
    Product : VChat
    Version : First
    WebSite : http://vchat.host.sk
    Problem :
            * View messages
            * Easy DoS
    
    Description:
    ------------
    
    View messages:
    ==============
    
    File with all chat sessions are in txt file (msg.txt) and everybody can 
    read it
    
    Easy DoS:
    =========
    
    If the size msg.txt will be more than 326 kb a window of a chat will 
    start to be reloaded on some times per one second, then fastly, fastly 
    while eventually and at all it will cease to be reloaded
    
    Exploits:
    ---------
    
    http://[somehost]/vchat/msg.txt
    http://[somehost]/vchat/chat.php  << In message field u must paste 326 kb 
    of text
    
    Contacts:
    ---------
    
    r2subj3ctat_private
    www.dwcgr0up.com
    irc.dwcgr0up.biz #dwc
    



    This archive was generated by hypermail 2b30 : Tue Mar 25 2003 - 09:42:07 PST