CVE-2006-0706

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-15 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter.

Affected products

Gastebuch: through 1.3.2

References

http://marc.info/?l=bugtraq&m=113986789801121&w=2
http://secunia.com/advisories/18849
http://www.php4scripte.de/index.php
http://www.securityfocus.com/bid/16615
http://www.vupen.com/english/advisories/2006/0566
https://exchange.xforce.ibmcloud.com/vulnerabilities/24670
http://marc.info/?l=bugtraq&m=113986789801121&w=2
http://secunia.com/advisories/18849
http://www.php4scripte.de/index.php
http://www.securityfocus.com/bid/16615
http://www.vupen.com/english/advisories/2006/0566
https://exchange.xforce.ibmcloud.com/vulnerabilities/24670

Get alerted when CVE-2006-0706 or the next vulnerability affects your stack