Unscored severity · published Jun 19, 2006
CVE-2006-3062
Cross-site scripting (XSS) vulnerability in index.php in myPHP Guestbook 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.php in myPHP Guestbook 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MG
Myphp Guestbook · Myphp Guestbook
2.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3062
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3062
Vendor Advisory
http://secunia.com/advisories/20572
securityreason.com
http://securityreason.com/securityalert/1110
www.securityfocus.com
http://www.securityfocus.com/archive/1/436842/100/0/threaded
www.vupen.com
http://www.vupen.com/english/advisories/2006/2308
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27074
More from Myphp Guestbook
–
CVE-2006-3063
Multiple cross-site scripting (XSS) vulnerabilities in myPHP Guestbook 1.x through 2.0.0-r1 and before 2.0.1 RC5 allow remote attackers to inject arbitrary web script or HTML via…