medium4.3Public exploit code
CVE-2006-0857
Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- E107 Website System 0.7.2 Chatbox Plugin - HTML Injection2006-02-18 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E107 | Chatbox Plugin | Version 1.0 |
| E107 | E107 | Version 0.7.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/425388/100/0/threaded
- http://www.securityfocus.com/bid/16719
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24815
- http://www.securityfocus.com/archive/1/425388/100/0/threaded
- http://www.securityfocus.com/bid/16719
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24815