Lucene search
MitreCVE-2006-7076HistoryMar 02, 2007 - 9:18 p.m.
CVE-2006-7076
2007-03-0221:18:00
mitre
web.nvd.nist.gov
20
cve-2006-7076
cross-site scripting
xss
vulnerability
guestbook.php
advanced guestbook 2.4
phpbb
remote attackers
web script
html
entry parameter
sql injection
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0.004
Percentile
75.0%
Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection.
Affected configurations
Node
phpbb_groupphpbb_advanced_guestbookMatch2.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| phpbb_group | phpbb_advanced_guestbook | 2.4.0 | cpe:2.3:a:phpbb_group:phpbb_advanced_guestbook:2.4.0:*:*:*:*:*:*:* |
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0.004
Percentile
75.0%
Related for CVE-2006-7076