PT-2006-4189 · Open Guestbook · Open Guestbook

Simo64 · Publicado 2006-06-29 · Atualizado 2024-02-09 · CVE-2006-3295

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open Guestbook version 0.5

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title parameter in the header.php file.

Recommendations For Open Guestbook version 0.5, avoid using the title parameter in the affected header.php file until a fix is available. Consider validating and sanitizing user input to prevent malicious script injections.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2006-3295

Produtos afetados

Open Guestbook

Referências · 8

• 🔥 https://exploit-db.com/exploits/28111 · Exploit
• 🔥 http://securityfocus.com/bid/18666 · Exploit
• http://vupen.com/english/advisories/2006/2545 · Nota
• http://securityreason.com/securityalert/1166 · Nota
• http://secunia.com/advisories/20796 · Nota
• http://securityfocus.com/archive/1/438381/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3295 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27397 · Nota