Lucene search
HistoryJan 16, 2007 - 7:28 p.m.
CVE-2006-6487
cve-2006-6487
xss
dt guestbook
security vulnerability
web script injection
5.8 Medium
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.026 Low
EPSS
Percentile
90.2%
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the error[] parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dt_guestbook:dt_guestbook | dt guestbook | eq | 1.0f |
Related
securityvulns
securityvulns
dt_guestbook version 1.0f XSS vulnerability
2007-01-17 00:00:00
packetstorm
packetstorm
netvigilance-sa10.txt
2007-01-18 00:00:00
5.8 Medium
AI Score
Confidence
High
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.026 Low
EPSS
Percentile
90.2%
Related for CVE-2006-6487