NVD

Id
62291  
Name
CVE-2006-3617  
Description
Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message (aka comments), (3) website, and (4) email parameters, which bypasses XSS protection mechanisms that check for SCRIPT tags but not others, as demonstrated by a javascript URI in an onMouseOver attribute and the src attribute in an iframe tag. NOTE: some vectors might overlap CVE-2006-2975, although the use of alternate manipulations makes it unclear.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2008-09-05  
Seq
2006-3617  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322750 62291 CVE-2006-3617 http://www.neosecurityteam.net/index.php?action=advisories&id=23  View
322751 62291 CVE-2006-3617 20060707 PBL Guestbook <= 1.32 XSS & SQL Querys Vulnerabilities  View
322752 62291 CVE-2006-3617 pblguestbook-multiple-xss(27006)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60508 JVNDB-2006-002774 PBL Guestbook の pblguestbook.php におけるクロスサイトスクリプティングの脆弱性 Pixelated By Lev (PBL) Guestbook の pblguestbook.php は、SCRIPT タグ以外をチェックしない XSS 保護メカニズムを回避されるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3617 19719 CVE-2006-3617 62291 5.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002774.html 2006-07-18 2012-12-20 View