CVE-2006-3063

EPSS 1.2%

Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) email, (3) homepage, (4) id, (5) name, and (6) text parameters in (a) index.php, the (7) comment, (8) email, (9) homepage, (10) number, (11) name, and (12) text parameters in (b) admin/guestbook.php, and the (13) email, (14) homepage, (15) icq, (16) name, and (17) text parameters in (c) admin/edit.php.

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/20764 https://exchange.xforce.ibmcloud.com/vulnerabilities/27293 http://www.networkarea.ch/forum/topic.php?id=4&s=9106beea248ecd1a552439168ada227e http://www.securityfocus.com/bid/18582 http://www.vupen.com/english/advisories/2006/2480