Cross site scripting

2014-10-2016:55:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.

CPENameOperatorVersion
text_chat_roomseq8.2.0

CPE	Name	Operator	Version
	text_chat_rooms	eq	8.2.0

References

archives.neohapsis.com/archives/bugtraq/2014-08/0026.html

packetstormsecurity.com/files/127775/Pro-Chat-Rooms-8.2.0-XSS-Shell-Upload-SQL-Injection.html

exchange.xforce.ibmcloud.com/vulnerabilities/95125

exchange.xforce.ibmcloud.com/vulnerabilities/95126

www.exploit-db.com/exploits/34275