CVE-2006-2757

Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php, (b) newtopic.php, and (c) reply.php; and (3) ID parameter to (d) edit.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.68% chance of exploitation in the next 30 days, 75th percentile

Published

2006-06-02

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/435196/100/0/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2006-2756
• CVE-2006-2758
• CVE-2006-2755
• CVE-2006-2763
• CVE-2006-2747
• CVE-2006-2766