Lucene search
HistoryJun 24, 2006 - 1:06 a.m.
CVE-2006-3211
cve
2006
3211
cross-site scripting
xss
vulnerability
cjguestbook
sign.php
img bbcode
comments parameter
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.3%
Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter.
Affected configurations
Node
cjguestbook_projectcjguestbookRange≤1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| cjguestbook_project:cjguestbook | cjguestbook project cjguestbook | le | 1.3 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
85.3%
Related for CVE-2006-3211