CVEvulnerability
CVE-2006-2772
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• hogstorps hogstorp guestbook 2.0
References
- http://secunia.com/advisories/20402 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/18203 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2082 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26980 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20402 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/18203 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2082 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26980 exchange.xforce.ibmcloud.com