Vulnerabilities > CVE-2006-2882 - HTML Injection vulnerability in ASPScriptz Guest Book Default.ASP Multiiple

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
aspscriptz
NVD
Published: 2006-06-07
Updated: 2018-10-18

Summary

Multiple cross-site scripting (XSS) vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) GBOOK_UNAME, (2) GBOOK_EMAIL, (3) GBOOK_CITY, (4) GBOOK_COU, (5) GBOOK_WWW, and (6) GBOOK_MESS form fields.

Vulnerable Configurations

Part Description Count
Application
Aspscriptz
1

References