CVE
- Id
- 14711
- CVE No.
- CVE-2005-3505
- Status
- Candidate
- Description
- Cross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as <b>, which are processed by Internet Explorer.
- Phase
- Assigned (20051105)
- Votes
- None (candidate not yet proposed)
- Comments