Vulnerabilities > CVE-2006-0941 - Input Validation vulnerability in Cynical Games Shoutlive 1.1.0

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE

Summary

Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages.

Vulnerable Configurations

Part Description Count
Application
Cynical_Games
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/44492/EV0087.txt
idPACKETSTORM:44492
last seen2016-12-05
published2006-03-09
reporterAliaksandr Hartsuyeu
sourcehttps://packetstormsecurity.com/files/44492/EV0087.txt.html
titleEV0087.txt