CVE-2006-6278

CVE-2006-6278

EPSS 1.4%

Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/23181 http://securityreason.com/securityalert/1964 https://exchange.xforce.ibmcloud.com/vulnerabilities/30639 http://www.securityfocus.com/archive/1/453123/100/0/threaded http://www.securityfocus.com/bid/21373 http://www.vupen.com/english/advisories/2006/4807