CVEvulnerability
CVE-2006-2605
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php.
Affected configurations
• dschat dschat 1.0
References
- http://secunia.com/advisories/20258 Vendor Advisory
- http://securityreason.com/securityalert/958 securityreason.com
- http://securitytracker.com/id?1016148 securitytracker.com
- http://www.osvdb.org/25734 www.osvdb.org
- http://www.securityfocus.com/archive/1/434821/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18084 Patch
- http://www.vupen.com/english/advisories/2006/1961 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26641 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20258 Vendor Advisory
- http://securityreason.com/securityalert/958 securityreason.com
- http://securitytracker.com/id?1016148 securitytracker.com
- http://www.osvdb.org/25734 www.osvdb.org
- http://www.securityfocus.com/archive/1/434821/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18084 Patch
- http://www.vupen.com/english/advisories/2006/1961 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26641 exchange.xforce.ibmcloud.com