CVE-2006-1824

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Comment parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25850

http://www.vupen.com/english/advisories/2006/1422

http://www.securityfocus.com/bid/17594

http://www.securityfocus.com/bid/17537

http://www.securityfocus.com/archive/1/431070/100/0/threaded

http://secunia.com/advisories/19669

http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS