CVE-2006-3063

EPSS 1.2%

Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) email, (3) homepage, (4) id, (5) name, and (6) text parameters in (a) index.php, the (7) comment, (8) email, (9) homepage, (10) number, (11) name, and (12) text parameters in (b) admin/guestbook.php, and the (13) email, (14) homepage, (15) icq, (16) name, and (17) text parameters in (c) admin/edit.php.

Productos afectados

n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/20764 https://exchange.xforce.ibmcloud.com/vulnerabilities/27293 http://www.networkarea.ch/forum/topic.php?id=4&s=9106beea248ecd1a552439168ada227e http://www.securityfocus.com/bid/18582 http://www.vupen.com/english/advisories/2006/2480