Description
Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php.
References
- x7chat-avatar-xss(26327) vdb-entry
- 20060506 X7Chat <= 2.0.2 avatar XSS injection mailing-list
- 859 third-party-advisory
- 20007 third-party-advisory
- 17869 vdb-entry
- ADV-2006-1702 vdb-entry
- 25303 vdb-entry