CVE-2006-3568

2006-07-1301:00:00

mitre

www.cve.org

5.9 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) nickname parameters.

References

it.security.netsons.org/exploit/FGB.txt

secunia.com/advisories/21024

www.osvdb.org/27107

www.securityfocus.com/archive/1/440152/100/100/threaded

www.securityfocus.com/bid/18942

www.vupen.com/english/advisories/2006/2762

exchange.xforce.ibmcloud.com/vulnerabilities/27697