|
Chatty improper input sanitizing
Discovered by: Nomenumbra
Date: 21/5/2006
impact:moderate (possible defacement)
Chatty is a PHP-based chatscript allowing users to chat over the web.
Subscribing with a username like this:
would cause major xss in the chatroom.
Nomenumbra