Unscored CVE-2006-7076 EUVD-2006-7058GHSA-34c2-xgp5-5cjc

Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary w…

Published Feb 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection.

References

2323 third-party-advisory
http://www.majorsecurity.de/advisory/major_rls25.txt
20060722 [MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities mailing-list
advancedguestbook-guestbook-xss(27907) vdb-entry
19905 third-party-advisory