Lucene search

K
cveMitreCVE-2006-0603
HistoryFeb 08, 2006 - 11:02 p.m.

CVE-2006-0603

2006-02-0823:02:00
CWE-79
mitre
web.nvd.nist.gov
31
cve
2006
0603
cross-site scripting
hinton design
phphg guestbook

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.008

Percentile

81.7%

Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) location, (2) website, or (3) message parameter.

Affected configurations

Nvd
Node
hinton_designphphg_guestbookMatch1.2
VendorProductVersionCPE
hinton_designphphg_guestbook1.2cpe:2.3:a:hinton_design:phphg_guestbook:1.2:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.008

Percentile

81.7%