Back to search
CVE-2005-2545
Published: Aug 10, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHPOpenChat 3.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content parameter to profile.php and profile_misc.php, (3) the profile fields in userpage.php, (4) subject or (5) body in mail.php, or (8) disinvited_chatter or (7) invited_chatter parameter to invite.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
14484
vdb-entry
x_refsource_BID
1014634
vdb-entry
x_refsource_SECTRACK
18678
vdb-entry
x_refsource_OSVDB
18674
vdb-entry
x_refsource_OSVDB
phpopenchat-multiple-scripts-xss(21761)
vdb-entry
x_refsource_XF
18676
vdb-entry
x_refsource_OSVDB
16350
third-party-advisory
x_refsource_SECUNIA
20050805 [HSC Security Group] Multiple XSS in phpopenchat 3.0.2
mailing-list
x_refsource_BUGTRAQ
18677
vdb-entry
x_refsource_OSVDB
18675
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now