Search
Find a vulnerability
Search criteria
2 vulnerabilities found for php_guestbook by skullsplitter
CVE-2006-1256 (GCVE-0-2006-1256)
Vulnerability from nvd – Published: 2006-03-19 01:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/650 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/104/summary.html | x_refsource_MISC |
| http://www.osvdb.org/23941 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/0974 | vdb-entryx_refsource_VUPEN |
| http://attrition.org/pipermail/vim/2006-March/000… | mailing-listx_refsource_VIM |
| http://www.boysen.be/en/ | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/429254/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/19268 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/17136 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2006-03-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.736Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "650",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/650"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/104/summary.html"
},
{
"name": "23941",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23941"
},
{
"name": "ADV-2006-0974",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0974"
},
{
"name": "20060318 Vendor ACK for Skull-Splitter Guestbook XSS",
"tags": [
"mailing-list",
"x_refsource_VIM",
"x_transferred"
],
"url": "http://attrition.org/pipermail/vim/2006-March/000613.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.boysen.be/en/"
},
{
"name": "20060329 [eVuln] Skull-Splitter\u0027s PHP Guestbook XSS Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/429254/100/0/threaded"
},
{
"name": "19268",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19268"
},
{
"name": "17136",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17136"
},
{
"name": "skullsplitter-guestbook-xss(25293)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "650",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/650"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/104/summary.html"
},
{
"name": "23941",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23941"
},
{
"name": "ADV-2006-0974",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0974"
},
{
"name": "20060318 Vendor ACK for Skull-Splitter Guestbook XSS",
"tags": [
"mailing-list",
"x_refsource_VIM"
],
"url": "http://attrition.org/pipermail/vim/2006-March/000613.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.boysen.be/en/"
},
{
"name": "20060329 [eVuln] Skull-Splitter\u0027s PHP Guestbook XSS Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/429254/100/0/threaded"
},
{
"name": "19268",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19268"
},
{
"name": "17136",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17136"
},
{
"name": "skullsplitter-guestbook-xss(25293)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1256",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "650",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/650"
},
{
"name": "http://evuln.com/vulns/104/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/104/summary.html"
},
{
"name": "23941",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23941"
},
{
"name": "ADV-2006-0974",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0974"
},
{
"name": "20060318 Vendor ACK for Skull-Splitter Guestbook XSS",
"refsource": "VIM",
"url": "http://attrition.org/pipermail/vim/2006-March/000613.html"
},
{
"name": "http://www.boysen.be/en/",
"refsource": "CONFIRM",
"url": "http://www.boysen.be/en/"
},
{
"name": "20060329 [eVuln] Skull-Splitter\u0027s PHP Guestbook XSS Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/429254/100/0/threaded"
},
{
"name": "19268",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19268"
},
{
"name": "17136",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17136"
},
{
"name": "skullsplitter-guestbook-xss(25293)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1256",
"datePublished": "2006-03-19T01:00:00.000Z",
"dateReserved": "2006-03-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.736Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-1256 (GCVE-0-2006-1256)
Vulnerability from cvelistv5 – Published: 2006-03-19 01:00 – Updated: 2024-08-07 17:03
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/650 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/104/summary.html | x_refsource_MISC |
| http://www.osvdb.org/23941 | vdb-entryx_refsource_OSVDB |
| http://www.vupen.com/english/advisories/2006/0974 | vdb-entryx_refsource_VUPEN |
| http://attrition.org/pipermail/vim/2006-March/000… | mailing-listx_refsource_VIM |
| http://www.boysen.be/en/ | x_refsource_CONFIRM |
| http://www.securityfocus.com/archive/1/429254/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/19268 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/17136 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2006-03-17 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T17:03:28.736Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "650",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/650"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/104/summary.html"
},
{
"name": "23941",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/23941"
},
{
"name": "ADV-2006-0974",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0974"
},
{
"name": "20060318 Vendor ACK for Skull-Splitter Guestbook XSS",
"tags": [
"mailing-list",
"x_refsource_VIM",
"x_transferred"
],
"url": "http://attrition.org/pipermail/vim/2006-March/000613.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.boysen.be/en/"
},
{
"name": "20060329 [eVuln] Skull-Splitter\u0027s PHP Guestbook XSS Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/429254/100/0/threaded"
},
{
"name": "19268",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/19268"
},
{
"name": "17136",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/17136"
},
{
"name": "skullsplitter-guestbook-xss(25293)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-03-17T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "650",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/650"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/104/summary.html"
},
{
"name": "23941",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/23941"
},
{
"name": "ADV-2006-0974",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0974"
},
{
"name": "20060318 Vendor ACK for Skull-Splitter Guestbook XSS",
"tags": [
"mailing-list",
"x_refsource_VIM"
],
"url": "http://attrition.org/pipermail/vim/2006-March/000613.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.boysen.be/en/"
},
{
"name": "20060329 [eVuln] Skull-Splitter\u0027s PHP Guestbook XSS Vulnerability",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/429254/100/0/threaded"
},
{
"name": "19268",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/19268"
},
{
"name": "17136",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/17136"
},
{
"name": "skullsplitter-guestbook-xss(25293)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-1256",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "650",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/650"
},
{
"name": "http://evuln.com/vulns/104/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/104/summary.html"
},
{
"name": "23941",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/23941"
},
{
"name": "ADV-2006-0974",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0974"
},
{
"name": "20060318 Vendor ACK for Skull-Splitter Guestbook XSS",
"refsource": "VIM",
"url": "http://attrition.org/pipermail/vim/2006-March/000613.html"
},
{
"name": "http://www.boysen.be/en/",
"refsource": "CONFIRM",
"url": "http://www.boysen.be/en/"
},
{
"name": "20060329 [eVuln] Skull-Splitter\u0027s PHP Guestbook XSS Vulnerability",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/429254/100/0/threaded"
},
{
"name": "19268",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/19268"
},
{
"name": "17136",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/17136"
},
{
"name": "skullsplitter-guestbook-xss(25293)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25293"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-1256",
"datePublished": "2006-03-19T01:00:00.000Z",
"dateReserved": "2006-03-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T17:03:28.736Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}