Description
Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter ("New Name" field).
References
- 1016360 vdb-entry
- 1162 third-party-advisory
- 18557 vdb-entry
- 20060620 Somechess v1.5 rc1 - XSS mailing-list
- 20770 third-party-advisory
- somechess-menu-xss(27307) vdb-entry