CVEvulnerability
CVE-2006-0706
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter.
Affected configurations
• gastebuch gastebuch (<= 1.3.2)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=bugtraq&m=113986789801121&w=2 marc.info
- http://secunia.com/advisories/18849 Patch, Vendor Advisory
- http://www.php4scripte.de/index.php www.php4scripte.de
- http://www.securityfocus.com/bid/16615 Exploit, Patch
- http://www.vupen.com/english/advisories/2006/0566 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24670 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=113986789801121&w=2 marc.info
- http://secunia.com/advisories/18849 Patch, Vendor Advisory
- http://www.php4scripte.de/index.php www.php4scripte.de
- http://www.securityfocus.com/bid/16615 Exploit, Patch
- http://www.vupen.com/english/advisories/2006/0566 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24670 exchange.xforce.ibmcloud.com