CVE-2006-2415

Published: May 16, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) CFTOKEN parameter in (a) index.cfm and (3) CFTOKEN and (4) CFID parameter in (b) chat.cfm.

Affected (1)

Products: Flexchat: Flexchat

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Flexchat Flexchat	version ≤ 2.0

References (14)

http://pridels0.blogspot.com/2006/05/flexchat-xss.html

Source: cve@mitre.org

http://secunia.com/advisories/20101

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016104

Source: cve@mitre.org

http://www.osvdb.org/25504

Source: cve@mitre.org

http://www.osvdb.org/25505

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1804

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26429

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/05/flexchat-xss.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20101

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1016104

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/25504

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/25505

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1804

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26429

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.