CVE-2006-3212

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-24 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the (1) name, (2) email, (3) add, and (4) wName parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Cjguestbook: through 1.3; 1.2

References

http://secunia.com/advisories/20751
http://www.securityfocus.com/bid/18591
http://www.vupen.com/english/advisories/2006/2488
https://exchange.xforce.ibmcloud.com/vulnerabilities/27326
http://secunia.com/advisories/20751
http://www.securityfocus.com/bid/18591
http://www.vupen.com/english/advisories/2006/2488
https://exchange.xforce.ibmcloud.com/vulnerabilities/27326

Get alerted when CVE-2006-3212 or the next vulnerability affects your stack