CVE-2007-0814

Description

Multiple cross-site scripting (XSS) vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML (1) via the psuedo (pseudo) field or (2) during chat.

Affected products

• adrenalin_labs / adrenalins_asp_chat

References

• MISChttp://www.securityfocus.com/archive/1/459144/100/0/threaded
• MISChttp://securityreason.com/securityalert/2233
• MISChttp://osvdb.org/33654
• MISChttp://www.securityfocus.com/bid/22392
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/32203
• MISChttp://forums.avenir-geopolitique.net/viewtopic.php?t=2620