PT-2006-2959 · Php · Php-Gastebuch

Publicado 2006-04-21 · Atualizado 2008-09-05 · CVE-2006-1975

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP-Gastebuch version 1.61

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the Kommentar field in the guestbook newentry.php file.

Recommendations For PHP-Gastebuch version 1.61, consider validating and sanitizing user input in the Kommentar field to prevent the injection of malicious scripts or HTML. As a temporary workaround, restrict access to the guestbook newentry.php file until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2006-1975

Produtos afetados

Php-Gastebuch

Referências · 4

• 🔥 http://osvdb.org/ref/23/23962-gastebuch.txt · Exploit
• http://secunia.com/advisories/19810 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1975 · Nota de Segurança
• http://osvdb.org/23962 · Nota