CVE-2006-0078

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-04 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) shout variables to (a) shout.php, or the (3) title and (4) message variables to (b) guestbook.php.

Affected products

Haddad Said B-Net Software: 1.0

References

http://evuln.com/vulns/10/summary.html
http://secunia.com/advisories/18271
http://securityreason.com/securityalert/316
http://sourceforge.net/project/shownotes.php?release_id=442067&group_id=117067
http://www.osvdb.org/22190
http://www.osvdb.org/22191
http://www.securityfocus.com/archive/1/420673/100/0/threaded
http://www.securityfocus.com/archive/1/444320/100/0/threaded
http://www.securityfocus.com/bid/16114
http://www.vupen.com/english/advisories/2006/0018
http://evuln.com/vulns/10/summary.html
http://secunia.com/advisories/18271

Get alerted when CVE-2006-0078 or the next vulnerability affects your stack