PT-2006-4189 · Open Guestbook · Open Guestbook

Simo64 · Published 2006-06-29 · Updated 2024-02-09 · CVE-2006-3295

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open Guestbook version 0.5

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the title parameter in the header.php file.

Recommendations For Open Guestbook version 0.5, avoid using the title parameter in the affected header.php file until a fix is available. Consider validating and sanitizing user input to prevent malicious script injections.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2006-3295

Affected Products

Open Guestbook

References · 8

• 🔥 https://exploit-db.com/exploits/28111 · Exploit
• 🔥 http://securityfocus.com/bid/18666 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3295 · Security Note
• http://vupen.com/english/advisories/2006/2545 · Note
• http://securityreason.com/securityalert/1166 · Note
• http://secunia.com/advisories/20796 · Note
• http://securityfocus.com/archive/1/438381/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27397 · Note