Unscored CVE-2006-2969 EUVD-2006-2966GHSA-h7mw-hfm2-f7vq

Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascr…

Published Jun 12, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the input box in quickchat.php, and possibly other manipulations.

References

20060609 TinyMuw v1.0 - XSS mailing-list
tinymuw-quickchat-xss(27154) vdb-entry
ADV-2006-2310 vdb-entry
1091 third-party-advisory
18483 vdb-entry
20607 third-party-advisory