Description
Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in (1) fastchat.php and (2) fastshow.php.
References
- 20290 third-party-advisory
- 20060523 ChatPat v1.0 mailing-list
- 989 third-party-advisory
- chatpat-multiple-xss(26682) vdb-entry
- ADV-2006-1986 vdb-entry