CVE-2006-2415

CVE-2006-2415

EPSS 1.3%

Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) CFTOKEN parameter in (a) index.cfm and (3) CFTOKEN and (4) CFID parameter in (b) chat.cfm.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://pridels0.blogspot.com/2006/05/flexchat-xss.html http://secunia.com/advisories/20101 http://securitytracker.com/id?1016104 https://exchange.xforce.ibmcloud.com/vulnerabilities/26429 http://www.osvdb.org/25504 http://www.osvdb.org/25505 http://www.vupen.com/english/advisories/2006/1804