Unscored CVE-2006-3211 EUVD-2006-3208GHSA-2hf8-r8r6-qxjx

Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a…

Published Jun 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter.

References

ADV-2006-2488 vdb-entry
20751 third-party-advisory
1141 third-party-advisory
18556 vdb-entry
20060620 cjGuestbook v1.3 - XSS mailing-list
cjguestbook-comments-xss(27322) vdb-entry