CVE-2008-6502

The CVE-2008-6502 entry describes a Directory Traversal and potential XSS/CSRF vulnerability in Pro Chat Rooms 3.0.2. The issue arises when an authenticated user can influence the avatar parameter with a .. path to point to a local PHP script, which can then be executed by other users via sendDat...

CVE-2008-6501

CVE-2008-6501 is a cross-site scripting (XSS) vulnerability in Pro Chat Rooms 3.0.2 , affecting the component profiles/index.php via the gud parameter. The connected OpenVAS NASL entry and the NVD record corroborate an XSS flaw with CVSS around the mid-range (approx. 4.3–4.6; OpenVAS lists 4.6). ...