TUCoPS :: HP Unsorted C :: b06-2392.htm

Chatty improper input sanitizing
Chatty improper input sanitizing
Chatty improper input sanitizing



Chatty improper input sanitizing

Discovered by: Nomenumbra
Date: 21/5/2006
impact:moderate (possible defacement)

Chatty is a PHP-based chatscript allowing users to chat over the web.
Subscribing with a username like this: 
would cause major xss in the chatroom.

Nomenumbra

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH