CVEvulnerability
CVE-2006-2994
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter).
Affected configurations
• christian becher phazizguestbook 2.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/20615 secunia.com
- http://securityreason.com/securityalert/1081 securityreason.com
- http://www.securityfocus.com/archive/1/436602/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18495 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2421 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27065 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20615 secunia.com
- http://securityreason.com/securityalert/1081 securityreason.com
- http://www.securityfocus.com/archive/1/436602/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18495 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2421 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27065 exchange.xforce.ibmcloud.com