PT-2007-3591 · Tjs · Tjschat

Published 2007-04-25 · Updated 2018-10-16 · CVE-2007-2256

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TJSChat version 0.95

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the user parameter in the 'you.php' file.

Recommendations For TJSChat version 0.95, consider restricting access to the you.php file or validating and sanitizing the user parameter to prevent injection of malicious scripts. As a temporary workaround, avoid using the user parameter in the affected file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-2256

Affected Products

Tjschat

References · 8

• 🔥 https://exploit-db.com/exploits/29876 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2256 · Security Note
• http://securityfocus.com/bid/23593 · Note
• http://securityfocus.com/archive/1/466649/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33845 · Note
• http://securityreason.com/securityalert/2620 · Note
• http://secunia.com/advisories/24998 · Note
• http://vupen.com/english/advisories/2007/1517 · Note