CVE-2006-2231

Multiple cross-site scripting XSS vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 site, 3 city, 4 state, 5 country, and possibly 6 name fields, which are viewed via viewguest.cgi...

CVE-2006-2231

The CVE-2006-2231 entry describes multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi of Big Webmaster Guestbook Script 1.02 and earlier. The issue arises when user-supplied data in fields such as mail, site, city, state, country, and possibly name are injected and subsequently vi...

bigwebmaster guestbook multiply XSS

Affected software: Bigwebmaster Guestbook version 1.02 and down Vendor: http://www.bigwebmaster.com/Perl/ScriptsandPrograms/Guestbooks/ Introduction: taken from vendor site This is one of the most powerful guestbooks that you will find on the internet. Visitors who come to your site will be able ...

CVE-2006-2231: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 site, 3 city, 4 state, 5 country, and possibly 6 name fields, which are viewed via viewguest.cgi...

[Full-disclosure] bigwebmaster guestbook multiply XSS

Affected software: Bigwebmaster Guestbook version 1.02 and down Vendor: http://www.bigwebmaster.com/Perl/ScriptsandPrograms/Guestbooks/ Introduction: taken from vendor site This is one of the most powerful guestbooks that you will find on the internet. Visitors who come to your site will be able ...