4.3

CVE-2006-2231

EPSS 1.34%
Veröffentlicht 05.05.2006 19:02:00
Zuletzt bearbeitet 16.06.2026 22:24:36
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) site, (3) city, (4) state, (5) country, and possibly (6) name fields, which are viewed via viewguest.cgi.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Big Webmaster ≫ Big Webmaster Guestbook Script Version <= 1.02

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.34%	0.677

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045752.html

http://secunia.com/advisories/19971

http://securityreason.com/securityalert/843

http://www.osvdb.org/25257

http://www.securityfocus.com/archive/1/432970/100/0/threaded

http://www.securityfocus.com/bid/17834

https://exchange.xforce.ibmcloud.com/vulnerabilities/26246

https://nvd.nist.gov/vuln/detail/CVE-2006-2231

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-2231

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-2231

EUVD