CVE-2006-2231

MEDIUM 4.3CVE-2006-2231 · Published 05/05/2006 · updated 16/06/2026

In short

CVE-2006-2231 is a MEDIUM (CVSS 4.3) vulnerability affecting big webmaster guestbook script (big webmaster).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
big webmaster guestbook script big_webmaster	`≤ 1.02`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) site, (3) city, (4) state, (5) country, and possibly (6) name fields, which are viewed via viewguest.cgi.

References

lists.grok.org.uk/pipermail/full-disclosure/2006-May/045752.html
secunia.com/advisories/19971
securityreason.com/securityalert/843
osvdb.org/25257
securityfocus.com/archive/1/432970/100/0/threaded
securityfocus.com/bid/17834
exchange.xforce.ibmcloud.com/vulnerabilities/26246

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free