CVE-2006-3212 - Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote at

CVE-2006-3212

Summary

Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the (1) name, (2) email, (3) add, and (4) wName parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

Vulnerable Configurations

cpe:2.3:a:cjguestbook:cjguestbook:1.2:*:*:*:*:*:*:*
cpe:2.3:a:cjguestbook:cjguestbook:1.2:*:*:*:*:*:*:*
cpe:2.3:a:cjguestbook:cjguestbook:*:*:*:*:*:*:*:*
cpe:2.3:a:cjguestbook:cjguestbook:*:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 20-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:P/A:N

refmap via4

bid	18591
secunia	20751
vupen	ADV-2006-2488
xf	cjguestbook-posting-entry-xss(27326)

Last major update

20-07-2017 - 01:32

Published

24-06-2006 - 01:06

Last modified

20-07-2017 - 01:32