CVE-2006-1256

The CVE-2006-1256 entry corresponds to a cross-site scripting (XSS) vulnerability in Skull-Splitter’s PHP Guestbook (guestbook.php). Affected versions are 2.6 (and 2.7 per incident data) of Skull-Splitter’s PHP Guestbook. The root cause is improper sanitization of the url parameter, allowing remo...

CVE-2006-1256: Undefined Security Weakness

Cross-site scripting XSS vulnerability in guestbook.php in Soren Boysen SkullSplitter PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter...