CVEvulnerability
CVE-2014-5276
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-10-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.
Affected configurations
• pro chat rooms text chat rooms 8.2.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2014-08/0026.html Exploit
- http://packetstormsecurity.com/files/127775/Pro-Chat-Rooms-8.2.0-XSS-Shell-Upload-SQL-Injection.html Exploit
- http://www.exploit-db.com/exploits/34275 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95125 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95126 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2014-08/0026.html Exploit
- http://packetstormsecurity.com/files/127775/Pro-Chat-Rooms-8.2.0-XSS-Shell-Upload-SQL-Injection.html Exploit
- http://www.exploit-db.com/exploits/34275 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95125 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95126 exchange.xforce.ibmcloud.com