PCPIN Chat 6: potential XSS vulnerability in URL redirection script

From: <admin_at_pcpin.com>
Date: 24 May 2008 17:21:35 -0000

('binary' encoding is not supported, stored as-is) All PCPIN Chat 6 versions prior to 6.11 are affected by the potential XSS vulnerability in URL redirection script. The vulnerability is caused by insufficient protocol scheme validation in file /inc/url_redirection.inc.php

More info and patch here: http://community.pcpin.com/?include=700&thread_id=6918
Received on May 24 2008