Debian Linux Security Advisory 2158-1 - Michael Brooks (Sitewatch) discovered a reflective XSS flaw in cgiirc, a web based IRC client, which could lead to the execution of arbitrary javascript.
3e6ad70fa66588b466c834c0807720d6627466a52e57769dd4ae8aab58660bc6
CGI:IRC is a Perl/CGI program that allows you to use IRC from a Web browser without having to have access to an IRC port. It does not use Java, but it does need a browser capable of rendering frames. It can be used on a Web page to allow users to chat, or it can be used to access chat from behind a firewall.
654409c768026e9565e54a39e27064a4f86fc778042e1d46959f30d24fbfbce0