CVE-2006-2975 | BDVDB-2026-17491 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of IMG tags in the (1) name, (2) email, and (3) website parameter, which bypasses XSS protection mechanisms that check for SCRIPT tags but not IMG. NOTE: portions of this description's details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/20526
http://www.vupen.com/english/advisories/2006/2221
https://exchange.xforce.ibmcloud.com/vulnerabilities/27006
http://www.securityfocus.com/archive/1/436408/100/0/threaded
http://securityreason.com/securityalert/1088

Exploit#

No public exploit known

History#

Version 12006-06-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.