CVE-2006-2184

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-04 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."

Affected products

Chadha Software Technologies Phpkb Knowledge Base: through 1.5

References

http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html
http://secunia.com/advisories/19913
http://www.attrition.org/pipermail/vim/2006-May/000753.html
http://www.attrition.org/pipermail/vim/2006-May/000775.html
http://www.vupen.com/english/advisories/2006/1628
http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html
http://secunia.com/advisories/19913
http://www.attrition.org/pipermail/vim/2006-May/000753.html
http://www.attrition.org/pipermail/vim/2006-May/000775.html
http://www.vupen.com/english/advisories/2006/1628

Get alerted when CVE-2006-2184 or the next vulnerability affects your stack