CVEvulnerability
CVE-2006-4038
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gastname or (2) gastwohnort parameters.
Affected configurations
• chaossoft gaestechaos (<= 0.2)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://marc.info/?l=full-disclosure&m=115464286427745&w=2 Exploit, Mailing List
- http://secunia.com/advisories/21357 Permissions Required, Third Party Advisory
- http://www.securityfocus.com/archive/1/442205/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19343 Exploit, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3155 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28219 exchange.xforce.ibmcloud.com
- http://marc.info/?l=full-disclosure&m=115464286427745&w=2 Exploit, Mailing List
- http://secunia.com/advisories/21357 Permissions Required, Third Party Advisory
- http://www.securityfocus.com/archive/1/442205/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19343 Exploit, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3155 Not Applicable
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28219 exchange.xforce.ibmcloud.com