CVE-2006-0603

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) location, (2) website, or (3) message parameter.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://evuln.com/vulns/58/summary.htmlVendor Advisory
http://secunia.com/advisories/18758Patch, Vendor Advisory
http://securitytracker.com/id?1015620
http://www.securityfocus.com/archive/1/424740/100/0/threaded
http://www.securityfocus.com/bid/16541
http://www.vupen.com/english/advisories/2006/0480Vendor Advisory
http://evuln.com/vulns/58/summary.htmlVendor Advisory
http://secunia.com/advisories/18758Patch, Vendor Advisory
http://securitytracker.com/id?1015620
http://www.securityfocus.com/archive/1/424740/100/0/threaded
http://www.securityfocus.com/bid/16541
http://www.vupen.com/english/advisories/2006/0480Vendor Advisory

Timeline

Published: Feb 8, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-06047.5check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attacke CVE-2006-06054.3Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web scr CVE-2006-06067.5SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown atta CVE-2006-06077.5check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass aut CVE-2006-06087.5Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the usern CVE-2006-06094.3Cross-site scripting (XSS) vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitrary web script or HTM CVE-2006-06107.5Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote attackers to execute arb CVE-2006-06117.5Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to ar CVE-2006-06124.6Powersave daemon before 0.10.15.2 allows local users to gain privileges (unauthorized access to an X session) via unspecified vectors. NOTE:CVE-2006-06134.0Unspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain priv CVE-2006-06146.4Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08 al CVE-2006-06154.0Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attac