CVE-2006-1256 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Affected Software

Name	Vendor	Start Version	End Version
Php_guestbook	Skullsplitter	*	2.6 (including)
Php_guestbook	Skullsplitter	2.7 (including)	2.7 (including)

References

http://attrition.org/pipermail/vim/2006-March/000613.html
http://evuln.com/vulns/104/summary.html
http://secunia.com/advisories/19268
http://securityreason.com/securityalert/650
http://www.boysen.be/en/
http://www.osvdb.org/23941
http://www.securityfocus.com/archive/1/429254/100/0/threaded
http://www.securityfocus.com/bid/17136
http://www.vupen.com/english/advisories/2006/0974
https://exchange.xforce.ibmcloud.com/vulnerabilities/25293
http://attrition.org/pipermail/vim/2006-March/000613.html
http://evuln.com/vulns/104/summary.html
http://secunia.com/advisories/19268
http://securityreason.com/securityalert/650
http://www.boysen.be/en/
http://www.osvdb.org/23941
http://www.securityfocus.com/archive/1/429254/100/0/threaded
http://www.securityfocus.com/bid/17136
http://www.vupen.com/english/advisories/2006/0974
https://exchange.xforce.ibmcloud.com/vulnerabilities/25293

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-1256
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html