PT-2006-2959 · Php · Php-Gastebuch

Published 2006-04-21 · Updated 2008-09-05 · CVE-2006-1975

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP-Gastebuch version 1.61

Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the Kommentar field in the guestbook newentry.php file.

Recommendations For PHP-Gastebuch version 1.61, consider validating and sanitizing user input in the Kommentar field to prevent the injection of malicious scripts or HTML. As a temporary workaround, restrict access to the guestbook newentry.php file until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2006-1975

Affected Products

Php-Gastebuch

References · 4

• 🔥 http://osvdb.org/ref/23/23962-gastebuch.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1975 · Security Note
• http://secunia.com/advisories/19810 · Note
• http://osvdb.org/23962 · Note