# Exploit Title: CarChat24 HTML Injection # Date: 18.03.2012 # Author: Sony # Software Link: http://www.carchat24.com/ # Web Browser : Mozilla Firefox # Site : http://insecurity.ro # PoC: http://st2tea.blogspot.com/2012/03/carchat24-html-injection.html .................................................................. We can see a simple html code injection in carchat24. Click on windows and put our html code. Not a critical bug, but it's a bug. http://4.bp.blogspot.com/-0HC1S1XH_10/T2WAceDT7FI/AAAAAAAAAws/IVjCqBQLxkA/s1600/car24.JPG