CVE-2011-2470

Cross-site scripting (XSS) vulnerability in chat/base/admin/login.php in A Really Simple Chat (ARSC) 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsc_message parameter.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2011-06-29

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Really Simple Chat (Reallysimplechat)

References

• http://www.openwall.com/lists/oss-security/2011/06/02/1
• http://www.openwall.com/lists/oss-security/2011/06/02/7
• https://sourceforge.net/tracker/?func=detail&aid=3310673&group_id=32699&atid=406296