DSChat <= 1.0 XSS

2006-05-26 / 2006-05-27
Credit: zerogue gmail com
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2006-2605
CWE: CWE-79


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

DSChat <= 1.0 XSS Discovered by: Nomenumbra Date: 21/5/2006 impact:moderate (possible defacement) DSChat is a PHP-based chatscript which does no filtering against XSS whatsoever, thus allowing anyone to insert html or javascript in the chatbox. Nomenumbra


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top