|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Chatty improper input sanitizing
zerogue
gmail.com
Date: Mon May 22 2006 - 14:06:25 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Chatty improper input sanitizing
Discovered by: Nomenumbra
Date: 21/5/2006
impact:moderate (possible defacement)
Chatty is a PHP-based chatscript allowing users to chat over the web.
Subscribing with a username like this: <script>alert(%22xss%22)</script>
would cause major xss in the chatroom.
Nomenumbra
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]