PT-2015-3623
CVE-2014-100017
·
تاريخ النشر
2015-01-13
·
تاريخ التحديث
2017-09-08
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
PhpOnlineChat version 3.0
Description
The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the
message field in the canned opr.php file.Recommendations
For PhpOnlineChat version 3.0, consider validating and sanitizing user input in the
message field to prevent arbitrary web script or HTML injection. As a temporary workaround, restrict access to the canned opr.php file until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾