CVE-2006-2837

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-06 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the x_Comments parameter to guestbookadd.asp.

Affected products

Techno Dreams Guest Book: all versions

References

http://colander.altervista.org/advisory/TDGuestBook.txt
http://secunia.com/advisories/20403
http://www.securityfocus.com/bid/18210
http://www.vupen.com/english/advisories/2006/2079
http://colander.altervista.org/advisory/TDGuestBook.txt
http://secunia.com/advisories/20403
http://www.securityfocus.com/bid/18210
http://www.vupen.com/english/advisories/2006/2079

Get alerted when CVE-2006-2837 or the next vulnerability affects your stack