Unscored CVE-2006-0859 EUVD-2006-0864GHSA-x343-j77r-jqgr

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a cer…

Published Feb 23, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a certain modified form, possibly related to the nummer parameter.

References

20060302 Re: Guestbox XSS/an admin bypass mailing-list
20060220 Guestbox XSS/an admin bypass mailing-list
ADV-2006-0675 vdb-entry
23374 vdb-entry
18946 third-party-advisory
guestbox-admin-access(24797) vdb-entry