CVEvulnerability
CVE-2006-1824
1.2 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.2 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Comment parameter.
Affected configurations
• phpguestbook phpguestbook 1.0
References
- http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html pridels0.blogspot.com
- http://secunia.com/advisories/19669 secunia.com
- http://www.securityfocus.com/archive/1/431070/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17537 www.securityfocus.com
- http://www.securityfocus.com/bid/17594 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1422 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25850 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html pridels0.blogspot.com
- http://secunia.com/advisories/19669 secunia.com
- http://www.securityfocus.com/archive/1/431070/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17537 www.securityfocus.com
- http://www.securityfocus.com/bid/17594 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1422 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25850 exchange.xforce.ibmcloud.com