CVE-2006-0078

MEDIUM 4.3CVE-2006-0078 · Published 04/01/2006 · updated 16/06/2026

In short

CVE-2006-0078 is a MEDIUM (CVSS 4.3) vulnerability affecting b-net software (haddad said).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
b-net software haddad_said	`= 1.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) shout variables to (a) shout.php, or the (3) title and (4) message variables to (b) guestbook.php.

References

evuln.com/vulns/10/summary.html · Vendor Advisory
secunia.com/advisories/18271 · Vendor Advisory
securityreason.com/securityalert/316
sourceforge.net/project/shownotes.php
osvdb.org/22190
osvdb.org/22191
securityfocus.com/archive/1/420673/100/0/threaded
securityfocus.com/archive/1/444320/100/0/threaded
securityfocus.com/bid/16114
vupen.com/english/advisories/2006/0018

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free