X7 Chat 2.0.4 sources/frame.php room Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...

x7-xss.txt

X7 Chat 2.0.4 XSS ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : X7 Chat 2.0.4 ---------- Download : http://www.x7chat.com/releases/v2/x7chat205.zip ---------- Vuln Type: XSS ---------- Registerglobals: ON -----------------...

CVE-2006-3851

The CVE-2006-3851 entry covers an SQL injection in upgradev1.php for X7 Chat 2.0.4 and earlier, exploitable via the old_prefix parameter to execute arbitrary SQL commands remotely. Affected product: X7 Chat (PHP-based web chat). Root cause: improper sanitization of the old_prefix input before use...