NVD

Id
33004  
Name
CVE-2014-5276  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pro Chat Rooms Text Chat Rooms 8.2.0 allow remote authenticated users to inject arbitrary web script or HTML via (1) an uploaded profile picture or (2) the edit parameter to profiles/index.php.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-20  
Modified Date
2014-10-22  
Seq
2014-5276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173233 33004 CVE-2014-5276 20140805 Pro Chat Rooms v8.2.0 - Multiple Vulnerabilities  View
173234 33004 CVE-2014-5276 http://packetstormsecurity.com/files/127775/Pro-Chat-Rooms-8.2.0-XSS-Shell-Upload-SQL-Injection.html  View
173235 33004 CVE-2014-5276 34275  View
173236 33004 CVE-2014-5276 prochatrooms-uploadedfile-xss(95125)  View
173237 33004 CVE-2014-5276 prochatrooms-profilesindex-xss(95126)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16151 JVNDB-2014-005026 Pro Chat Rooms Text Chat Rooms におけるクロスサイトスクリプティングの脆弱性 Pro Chat Rooms Text Chat Rooms には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-5276 72565 CVE-2014-5276 33004 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005026.html 2014-08-05 2014-10-27 View