Unscored CVE-2006-2605 EUVD-2006-2604GHSA-7hqr-6m6f-x8jh

Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the c…

Published May 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php.

References

20258 third-party-advisory
20060522 DSChat <= 1.0 XSS mailing-list
958 third-party-advisory
25734 vdb-entry
ADV-2006-1961 vdb-entry
18084 vdb-entry
dschat-send-xss(26641) vdb-entry
1016148 vdb-entry