Security Advisory

CVE-2006-2969

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-06-12 20:00:00
Last updated 2024-08-07 18:06:27
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the input box in quickchat.php, and possibly other manipulations.