Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2006-6890

Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Voc-project
Products
Voodoo Chat
CVE-2006-3991

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Voc-project
Products
Voodoo Chat