CVE-2006-1824 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name (2) Website and (3) Comment parameter.

Reference

http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html http://secunia.com/advisories/19669 http://www.securityfocus.com/archive/1/431070/100/0/threaded http://www.securityfocus.com/bid/17537 http://www.securityfocus.com/bid/17594 http://www.vupen.com/english/advisories/2006/1422 https://exchange.xforce.ibmcloud.com/vulnerabilities/25850