Lucene search
HistoryDec 07, 2006 - 5:28 p.m.
CVE-2006-6371
cve-2006-6371
cross-site scripting
xss
pbguestbook.php
jab guest book
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.5%
Cross-site scripting (XSS) vulnerability in pbguestbook.php in JAB Guest Book allows remote attackers to inject arbitrary web script or HTML via the author parameter.
Affected configurations
Node
james_barnsleyjab_guest_book
| CPE | Name | Operator | Version |
|---|---|---|---|
| james_barnsley:jab_guest_book | james barnsley jab guest book | eq | * |
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6 Medium
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.5%
Related for CVE-2006-6371