CVE

Id
19721  
CVE No.
CVE-2006-3617  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message (aka comments), (3) website, and (4) email parameters, which bypasses XSS protection mechanisms that check for SCRIPT tags but not others, as demonstrated by a javascript URI in an onMouseOver attribute and the src attribute in an iframe tag. NOTE: some vectors might overlap CVE-2006-2975, although the use of alternate manipulations makes it unclear.  
Phase
Assigned (20060714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
178627 19721 CVE-2006-3617 BUGTRAQ:20060707 PBL Guestbook <= 1.32 XSS & SQL Querys Vulnerabilities  View
178628 19721 CVE-2006-3617 URL:http://www.securityfocus.com/archive/1/archive/1/439486/100/0/threaded  View
178629 19721 CVE-2006-3617 MISC:http://www.neosecurityteam.net/index.php?action=advisories&id=23  View
178630 19721 CVE-2006-3617 XF:pblguestbook-multiple-xss(27006)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58685 JVNDB-2006-000950 FastJar および GNU GCC におけるディレクトリトラバーサルの脆弱性 FastJar には、ファイル名に "../" を含む jar ファイルを処理した際に、ディレクトリトラバーサルの脆弱性が存在します。FastJar は GNU GCC 4.1.x 以前に含まれているため、GCC にも影響があります。 CVE-2006-3619 19721 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000950.html  View