CVE-2006-2184

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.18%

Published

May 4, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."

Affected Products (1)

chadha_software_technologies · phpkb_knowledge_basevulnerable

References (10)

http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html

http://secunia.com/advisories/19913

Vendor Advisory

http://www.attrition.org/pipermail/vim/2006-May/000753.html

http://www.attrition.org/pipermail/vim/2006-May/000775.html

http://www.vupen.com/english/advisories/2006/1628