Description
Multiple cross-site scripting (XSS) vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML (1) via the psuedo (pseudo) field or (2) during chat.
References
- 20070203 Adrenalin's ASP Chat XSS mailing-list
- 2233 third-party-advisory
- 33654 vdb-entry
- 22392 vdb-entry
- adrenalin-unspecified-script-xss(32203) vdb-entry
- http://forums.avenir-geopolitique.net/viewtopic.php?t=2620