PT-2006-3163 · Phpkb · Phpkb Knowledge Base

D4Igoro · Published 2006-05-04 · Updated 2011-03-08 · CVE-2006-2184

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHPKB Knowledge Base (affected versions not specified)

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter in the "search.php" file. This issue was initially disputed by the vendor but was later acknowledged and fixed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-2184

Affected Products

Phpkb Knowledge Base

References · 6

• http://secunia.com/advisories/19913 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2184 · Security Note
• http://attrition.org/pipermail/vim/2006-May/000753.html · Note
• http://attrition.org/pipermail/vim/2006-May/000775.html · Note
• http://vupen.com/english/advisories/2006/1628 · Note
• http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html · Note