CVE-2006-2572

2006-05-2423:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.006

Percentile

78.8%

JSON

Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters.

References

secunia.com/advisories/20201

securityreason.com/securityalert/948

www.osvdb.org/25732

www.securityfocus.com/archive/1/434869/100/0/threaded

www.securityfocus.com/archive/1/436615/100/0/threaded

www.securityfocus.com/bid/18310

www.vupen.com/english/advisories/2006/1942

exchange.xforce.ibmcloud.com/vulnerabilities/26629