CVE-2005-0919

medium

Description

Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21317

http://www.securityfocus.com/bid/12940

http://www.securityfocus.com/bid/12927

http://www.osvdb.org/15156

http://securitytracker.com/id?1013588

http://marc.info/?l=full-disclosure&m=111211930330410&w=2

http://exploitlabs.com/files/advisories/EXPL-A-2005-003-adventiachat.txt

Details

Source: Mitre, NVD

Published: 2005-03-29

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N