NetSight
IP …
medium4.3

CVE-2011-5296

Cross-site scripting (XSS) vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter.

Impact

Cross-site scripting (XSS) vulnerability in profilo.php in Happy Chat 1.0 allows remote attackers to inject arbitrary web script or HTML via the nick parameter.

Affected products

VendorProductAffected versions
TuttophpHappy Chat
Version 1.0

Weakness classification

CWE-79

References