lisa, i hear you're flipping out, babe

i wish i'd seen the tinychat :( i'm so sorry what happened to your forum, lisa.

you know /vchat/scripts/sendim.cgi has some serious security problems, right? idk which version was up there, but ...yeah

Net Clubs Pro contains a flaws that allows a remote cross site scripting
attacks.
Those flaws exists because input passed to
"onuser","pass","chatsys","room",
"username","to" parameter in
"/vchat/scripts/sendim.cgi" and input passed to"username" paremter in
"/vchat/scripts/imessage.cgi" and input passed to"password" parameter in "
login.cgi" and input passed to "cat_id" parameter in
"classifieds/viewcat.cgi" isn't properly sanitised before being returned to
the user.
This could allow a user to create a specially crafted URL that would execute
arbitrary code in a user's browser within the trust relationship between the
browser and the server, leading to a loss of integrity.