CVEvulnerability
CVE-2006-0078
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) shout variables to (a) shout.php, or the (3) title and (4) message variables to (b) guestbook.php.
Affected configurations
• haddad said b-net software 1.0
References
- http://evuln.com/vulns/10/summary.html Vendor Advisory
- http://secunia.com/advisories/18271 Vendor Advisory
- http://securityreason.com/securityalert/316 securityreason.com
- http://sourceforge.net/project/shownotes.php?release_id=442067&group_id=117067 sourceforge.net
- http://www.osvdb.org/22190 www.osvdb.org
- http://www.osvdb.org/22191 www.osvdb.org
- http://www.securityfocus.com/archive/1/420673/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/444320/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16114 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0018 www.vupen.com
- http://evuln.com/vulns/10/summary.html Vendor Advisory
- http://secunia.com/advisories/18271 Vendor Advisory
- http://securityreason.com/securityalert/316 securityreason.com
- http://sourceforge.net/project/shownotes.php?release_id=442067&group_id=117067 sourceforge.net
- http://www.osvdb.org/22190 www.osvdb.org
- http://www.osvdb.org/22191 www.osvdb.org
- http://www.securityfocus.com/archive/1/420673/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/444320/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16114 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0018 www.vupen.com