Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content parameter to profile.php and profile_misc.php, (3) the profile fields in userpage.php, (4) subject or (5) body in mail.php, or (8) disinvited_chatter or (7) invited_chatter parameter to invite.php.
References
- 14484 vdb-entry
- 1014634 vdb-entry
- 18678 vdb-entry
- 18674 vdb-entry
- phpopenchat-multiple-scripts-xss(21761) vdb-entry
- 18676 vdb-entry
- 16350 third-party-advisory
- 20050805 [HSC Security Group] Multiple XSS in phpopenchat 3.0.2 mailing-list
- 18677 vdb-entry
- 18675 vdb-entry