CVE-2006-3526

MEDIO 5.8CVE-2006-3526 · Published 12/07/2006 · updated 16/06/2026

In breve

CVE-2006-3526 è una vulnerabilità MEDIO (CVSS 5.8) che riguarda sport-slo advanced guestbook (sport-slo).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
sport-slo advanced guestbook sport-slo	`= 1.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Sport-slo Advanced Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) name and (2) form parameters.

References

secunia.com/advisories/20977 · Vendor Advisory
securityreason.com/securityalert/1211
osvdb.org/27066
securityfocus.com/archive/1/439491/100/0/threaded
vupen.com/english/advisories/2006/2712
exchange.xforce.ibmcloud.com/vulnerabilities/27629

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free