Unscored severity · published Jul 2, 2008
CVE-2008-2973
Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sitename and (2)…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) sitename and (2) wmessage parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
MM Chat · MM Chat
1.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2973
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2973
www.securityfocus.com
http://www.securityfocus.com/bid/29910
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43331
www.exploit-db.com
https://www.exploit-db.com/exploits/5919
More from MM Chat
–
CVE-2008-2974
Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via…