Vulnerabilities > CVE-2006-2637 - Products View.PHP Cross-Site Scripting vulnerability in Tuttophp Morris Guestbook, Pretty Guestbook and Smile Guestbook

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
tuttophp
NVD
Published: 2006-05-30
Updated: 2018-10-18

Summary

Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2) Pretty Guestbook 1, and (3) Smile Guestbook 1 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the pagina parameter.

Vulnerable Configurations

Part Description Count
Application
Tuttophp
3

References