Unscored CVE-2005-0930 EUVD-2005-0931GHSA-ggph-w98c-mvh8

Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web scrip…

Published Mar 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the user field or (2) the message parameter to message.php.

References

http://www.persianhacker.net/news/news-2946.html
20050329 [PersianHacker.NET 200503-12]Chatness 2.5.1 and prior XSS Vulnerabilities mailing-list
12929 vdb-entry
1013604 vdb-entry