rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3151 
Cross-site scripting (XSS) vulnerability in index.php in AssoCIateD (aka ACID) 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3152 
Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sectio parameter in (a) login.php, (b) write_newad.php, (c) newad.php, (d) printad.php, (e) askseller.php, (f) browse.php, (g) showmemberads.php, (h) note_ad.php, (i) abuse.php, (j) buynow.php, (k) confirm_newad.php, (2) an parameter in (l) printad.php, (m) note_ad.php, (3) who parameter in (n) showmemberads.php, and (4) adnr parameter in (o) buynow.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3153 
Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3154 
SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3155 
Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in (a) emailtofriend.pl or (b) violation.pl, (2) seller parameter in (c) vsoa.pl, (3) user parameter in (d) userask.pl or (e) leavefeed.pl, (4) itemnum parameter in userask.pl, (5) category parameter in (f) itemlist.pl, and the (6) query parameter in (g) search.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3156 
Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3157 
Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3158 
index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3159 
pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3160 
Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3161 
SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3162 
PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3163 
Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3164 
SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the first_row parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3165 
SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3166 
Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3167 
Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3168 
SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters in (a) read.php, and the (3) search and (4) debut parameters in (b) index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3169 
Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) msg_result and (2) rep_titre parameters in (a) read.php; and the (3) id and (4) parent parameters and (5) CSForum_nom, (6) CSForum_mail, and (7) CSForum_url cookie parameters in (b) ajouter.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3170 
CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse[] or readall parameter to index.php, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3171 
CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3172 
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash (/) character in the (1) lang_path parameter to (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/plugins/newsletter2/newsletter.inc.php; (2) path[cb] parameter to (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php, and (k) modules/sitemap/sitemap.inc.php; and the (3) rel parameter to (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3173 
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path[cb] parameter to (a) libraries/comment/postComment.php and (b) modules/poll/poll.php, (2) rel parameter to (c) modules/archive/overview.inc.php, and the (3) actualModuleDir parameter to (d) modules/forum/showThread.inc.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3174 
Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3175 
Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php, (2) ecrire.php, and (3) lire.php. NOTE: it was later reported that the ecrire.php vector also affects 1.2.  NOTE: this issue might be limited to a race condition during installation or an improper installation, since a completed installation creates an include file that prevents external control of the $lang variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3176 
SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3177 
PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3178 
Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. (dot dot) in their filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3179 
Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the account parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3180 
Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrary web script or HTML via the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3181 
SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3182 
Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a ..  (dot dot) in the uid parameter in the rss page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3183 
Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) browse parameter, which is not filtered in the resulting error message, and multiple unspecified input fields, including those involved when (2) updating a profile, (3) posting comments or entries in a blog, (4) uploading files, (5) picture captions, and (6) sending a private message (PM).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3184 
Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3185 
PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3186 
Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web script or HTML via the mainpath parameter to (1) data/footer.php and (2) admin/header.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3187 
Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) maingroup and (2) secondgroup parameters to (a) search_prod_list.asp, and the (3) maingroup parameter to (b) meny2.asp.  NOTE: it is possible that this is resultant from SQL injection or a forced SQL error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3188 
Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) maingroup and (2) secondgroup parameters to (a) search_prod_list.asp, and the (3) maingroup parameter to (b) meny2.asp.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3189 
Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3190 
SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3191 
Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3192 
PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via a URL in the (1) ipath parameter in common.php and (2) unspecified vectors in ad.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3193 
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) includes/content/contact_content.php; multiple files in adminpanel/includes/add_forms/ including (2) addbioform.php, (3) addfliersform.php, (4) addgenmerchform.php, (5) addinterviewsform.php, (6) addlinksform.php, (7) addlyricsform.php, (8) addmembioform.php, (9) addmerchform.php, (10) addmerchpicform.php, (11) addnewsform.php, (12) addphotosform.php, (13) addreleaseform.php, (14) addreleasepicform.php, (15) addrelmerchform.php, (16) addreviewsform.php, (17) addshowsform.php, (18) addwearmerchform.php; (19) adminpanel/includes/mailinglist/disphtmltbl.php, and (20) adminpanel/includes/mailinglist/dispxls.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3194 
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) gallery and (2) template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3195 
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3196 
index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3197 
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a POST that contains hexadecimal-encoded HTML.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T00:00:00.000Z
CVE-2006-3198 
Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T20:00:00.000Z
CVE-2006-3199 
Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL containing a long hostname, which triggers an out-of-bounds operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T20:00:00.000Z
CVE-2006-3200 
Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with a src tag containing a "File://" URI followed by an 8-bit character.  NOTE: some third parties were unable to verify this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T20:00:00.000Z
CVE-2006-3201 
Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T20:00:00.000Z
CVE-2006-3202 
The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-mapped sockets are being used before processing IPv6 socket options, which allows local users to cause a denial of service (crash) by creating an IPv4-mapped IPv6 socket with the SO_TIMESTAMP socket option set, then sending an IPv4 packet through the socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T20:00:00.000Z
CVE-2006-3203 
The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3204 
Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext by obtaining the plaintext password, which is sent when logging in, and the ciphertext, which is set in the pass_env cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3205 
Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, power_env, and id_env parameters in a cookie, which comprise a persistent logon that does not vary across sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3206 
register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "[NR]" sequence in the signature field, which is used to separate multiple records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3207 
Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the id parameter, as demonstrated by injecting a Perl CGI script using "[NR]" sequences in the message parameter, then calling close.php with modified id and t_id parameters to chmod the script.  NOTE: this issue might be resultant from dynamic variable evaluation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3208 
Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified "configuration fields" in (1) admin_chatconfig.php, (2) admin_configcss.php, (3) admin_config.php, or (4) admin_config2.php, which are stored as configuration settings.  NOTE: this issue can be exploited by remote attackers by leveraging other vulnerabilities in UPB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3209 
The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges.  NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon installation
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3210 
Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks via URLs or ".." sequences in the (1) dir_abs_src parameter in (a) check_entry.php, (b) admin_album.php, (c) admin_image.php, and (d) admin_util.php; and the (2) dir_abs_admin_src parameter in admin_album.php and admin_image.php.  NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3211 
Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z