CVE-2006-2605

medium

Description

Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26641

http://www.vupen.com/english/advisories/2006/1961

http://www.securityfocus.com/bid/18084

http://www.securityfocus.com/archive/1/434821/100/0/threaded

http://www.osvdb.org/25734

http://securitytracker.com/id?1016148

http://securityreason.com/securityalert/958

http://secunia.com/advisories/20258

Details

Source: Mitre, NVD

Published: 2006-05-25

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N