CVE-2006-3971

CVE-2006-3971

EPSS 1.6%

Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0716.html http://secunia.com/advisories/21286 https://exchange.xforce.ibmcloud.com/vulnerabilities/28086 http://www.osvdb.org/27643 http://www.securityfocus.com/bid/19238 http://www.vupen.com/english/advisories/2006/3064