Unscored CVE-2006-3971 EUVD-2006-3964GHSA-8mqc-4954-mv7r

Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers t…

Published Aug 2, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter.

References

21286 third-party-advisory
19238 vdb-entry
27643 vdb-entry
ADV-2006-3064 vdb-entry
ajaxchat-userid-xss(28086) vdb-entry
20060729 Ajax Chat Multiple Vulnerabilities mailing-list