CVE-2006-2605

2006-05-2510:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.7%

JSON

Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php.

References

secunia.com/advisories/20258

securityreason.com/securityalert/958

securitytracker.com/id?1016148

www.osvdb.org/25734

www.securityfocus.com/archive/1/434821/100/0/threaded

www.securityfocus.com/bid/18084

www.vupen.com/english/advisories/2006/1961

exchange.xforce.ibmcloud.com/vulnerabilities/26641