Unscored severity · published Dec 7, 2006
CVE-2006-6371
Cross-site scripting (XSS) vulnerability in pbguestbook.php in JAB Guest Book allows remote attackers to inject arbitrary web script or HTML via the author parameter
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in pbguestbook.php in JAB Guest Book allows remote attackers to inject arbitrary web script or HTML via the author parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JG
Jab Guest Book · James Barnsley
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6371
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6371
Vendor Advisory
http://secunia.com/advisories/23216
securityreason.com
http://securityreason.com/securityalert/1992
www.securityfocus.com
http://www.securityfocus.com/archive/1/453482/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21429
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/30718
More from Jab Guest Book
–
CVE-2006-6372
Multiple cross-site scripting (XSS) vulnerabilities in pbguestbook.php in JAB Guest Book 20061205 allow remote attackers to inject arbitrary web script or HTML via the (1) topic…