CVE-2006-2515

CVE-2006-2515

EPSS 1.4%

Cross-site scripting (XSS) vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20252 http://securityreason.com/securityalert/938 https://exchange.xforce.ibmcloud.com/vulnerabilities/26620 http://www.osvdb.org/25712 http://www.securityfocus.com/archive/1/434686/100/0/threaded http://www.vupen.com/english/advisories/2006/1929