CVE-2008-6501 - Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter

Published Mar 20, 2009

4.3

MEDIUM

CVSS 2.0

EPSS 1.50%

Description

Cross-site scripting (XSS) vulnerability in profiles/index.php in Pro Chat Rooms 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the gud parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://osvdb.org/50696
vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/33088
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/32758
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6471
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47241
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7409
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/50696		vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/33088		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/32758		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-6471		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47241		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/7409		exploitx_refsource_EXPLOIT-DB