CVE-2006-2605

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-25 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php.

Affected products

Dschat: 1.0

References

http://secunia.com/advisories/20258
http://securityreason.com/securityalert/958
http://securitytracker.com/id?1016148
http://www.osvdb.org/25734
http://www.securityfocus.com/archive/1/434821/100/0/threaded
http://www.securityfocus.com/bid/18084
http://www.vupen.com/english/advisories/2006/1961
https://exchange.xforce.ibmcloud.com/vulnerabilities/26641
http://secunia.com/advisories/20258
http://securityreason.com/securityalert/958
http://securitytracker.com/id?1016148
http://www.osvdb.org/25734

Get alerted when CVE-2006-2605 or the next vulnerability affects your stack