CVE-2006-4325

MEDIO 6.8CVE-2006-4325 · Published 24/08/2006 · updated 16/06/2026

In breve

CVE-2006-4325 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda doika guestbook (doika).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 76.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
doika guestbook doika	`≤ 2.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter.

References

evuln.com/vulns/134/description.html · Exploit
secunia.com/advisories/21549 · Vendor Advisory
osvdb.org/28068
securityfocus.com/archive/1/445903/100/0/threaded
securityfocus.com/bid/19656
vupen.com/english/advisories/2006/3342
exchange.xforce.ibmcloud.com/vulnerabilities/28503

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free