Unscored severity · published Jun 19, 2006
CVE-2006-3063
Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) email, (3) homepage, (4) id, (5) name, and (6) text parameters in (a) index.php, the (7) comment, (8) email, (9) homepage, (10) number, (11) name, and (12) text parameters in (b) admin/guestbook.php, and the (13) email, (14) homepage, (15) icq, (16) name, and (17) text parameters in (c) admin/edit.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MG
Myphp Guestbook · Myphp Guestbook
1.0; 1.8; 1.8.3; 1.9; 1.9.2; 2.0.0; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3063
secunia.com
http://secunia.com/advisories/20764
www.networkarea.ch
http://www.networkarea.ch/forum/topic.php?id=4&s=9106beea248ecd1a552439168ada227e
www.securityfocus.com
http://www.securityfocus.com/bid/18582
www.vupen.com
http://www.vupen.com/english/advisories/2006/2480
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27293
More from Myphp Guestbook
–
CVE-2006-3062
Cross-site scripting (XSS) vulnerability in index.php in myPHP Guestbook 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter