CVEvulnerability

CVE-2006-2184

4.3 MEDIUM Published 2006-05-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."

Affected configurations

• chadha software technologies phpkb knowledge base (<= 1.5)

References