CVE-2006-3852 | Vulnerability Database | Aqua Security

Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment (text) fields.

Affected Software

Name	Vendor	Start Version	End Version
Micro_guestbook	Phptoys	*	*

References

http://it.security.netsons.org/exploit/MicroGuestBook.txt
http://secunia.com/advisories/21155
http://securityreason.com/securityalert/1285
http://www.osvdb.org/28677
http://www.securityfocus.com/archive/1/440855/100/0/threaded
http://www.securityfocus.com/bid/19119
http://www.vupen.com/english/advisories/2006/2935
https://exchange.xforce.ibmcloud.com/vulnerabilities/27911
http://it.security.netsons.org/exploit/MicroGuestBook.txt
http://secunia.com/advisories/21155
http://securityreason.com/securityalert/1285
http://www.osvdb.org/28677
http://www.securityfocus.com/archive/1/440855/100/0/threaded
http://www.securityfocus.com/bid/19119
http://www.vupen.com/english/advisories/2006/2935
https://exchange.xforce.ibmcloud.com/vulnerabilities/27911

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3852
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html