CVE-2006-3212

The CVE-2006-3212 entry documents a cross-site scripting (XSS) vulnerability in cjGuestbook 1.3 and earlier, specifically in sign.php. The underlying issue allows remote attackers to inject web script or HTML through one of four user-supplied fields: name, email, add, and wName. The affected comp...

CVE-2006-3211: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter...

CVE-2006-3212: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the 1 name, 2 email, 3 add, and 4 wName parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2005-4551: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sign.php in codegrrl SimpBook 1.0, when htmlenable is on, allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php...