CVE-2006-2975

LOW 2.6CVE-2006-2975 · Published 12/06/2006 · updated 16/06/2026

In short

CVE-2006-2975 is a LOW (CVSS 2.6) vulnerability affecting pbl guestbook (pbl guestbook).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pbl guestbook pbl_guestbook	`= 1.31`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of IMG tags in the (1) name, (2) email, and (3) website parameter, which bypasses XSS protection mechanisms that check for SCRIPT tags but not IMG. NOTE: portions of this description's details are obtained from third party information.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free