CVE-2011-2470: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in chat/base/admin/login.php in A Really Simple Chat ARSC 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arscmessage parameter...

PT-2011-3893

Name of the Vulnerable Software and Affected Versions A Really Simple Chat ARSC versions 3.3-rc2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the arsc message parameter in the...