CVE-2006-2572

Description

Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26629

http://www.vupen.com/english/advisories/2006/1942

http://www.securityfocus.com/bid/18310

http://www.securityfocus.com/archive/1/436615/100/0/threaded

http://www.securityfocus.com/archive/1/434869/100/0/threaded

http://www.osvdb.org/25732

http://securityreason.com/securityalert/948

http://secunia.com/advisories/20201

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS