CVE

Id
12825  
CVE No.
CVE-2005-1619  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.css.php3 in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML commands via the FontName parameter. NOTE: it was later reported that 0.14.5 is also affected.  
Phase
Assigned (20050516)  
Votes
None (candidate not yet proposed)  
Comments