CVE-2006-3617

The CVE-2006-3617 entry describes a Cross-site scripting (XSS) vulnerability in Pixelated By Lev (PBL) Guestbook, specifically pblguestbook.php, affecting PBL Guestbook 1.32 and earlier. The vulnerability allows remote attackers to inject arbitrary script or HTML via the name, message, website, a...

CVE-2006-3617: Undefined Security Weakness

Cross-site scripting XSS vulnerability in pblguestbook.php in Pixelated By Lev PBL Guestbook 1.32 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 message aka comments, 3 website, and 4 email parameters, which bypasses XSS protection mechanisms that che...

CVE-2006-3618: Undefined Security Weakness

SQL injection vulnerability in pblguestbook.php in Pixelated By Lev PBL Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 website, 4 comments, 5 rate, and 6 private parameters...

CVE-2006-2975: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of IMG tags in the 1 name, 2 email, and 3 website parameter, which bypasses XSS protection mechanisms that...