4.3
CVSSv2

CVE-2005-0863

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote malicious users to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1, chatter2, chatter3, or chatter4 parameters to register.php.

Vulnerable Product Search on Vulmon Subscribe to Product

phpopenchat phpopenchat 3.0.0

phpopenchat phpopenchat 3.0.1

phpopenchat phpopenchat 3.0.2

Exploits

source: wwwsecurityfocuscom/bid/12841/info PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content Attacker-supplied HTML and script code would be able to access pro ...