2 matches found
CVE-2006-4325
Cross-site scripting XSS vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter...
6.8CVSS5.8AI score0.01607EPSS
SaveExploits2References7
CVE-2006-4325
The CVE refers to Doika guestbook (version 2.5, possibly earlier) with a reflected XSS in gbook.php via the page parameter. This allows remote attackers to inject arbitrary scripts/HTML. No patch/remediation details are provided in the supplied documents; exploitation status and exact fixes are n...
6.8CVSS5.8AI score0.01607EPSS
SaveExploits2References7Affected Software1
20