CVE-2006-2837

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.18%

Published

Jun 6, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the x_Comments parameter to guestbookadd.asp.

Affected Products (1)

techno_dreams · techno_dreams_guest_bookvulnerable

References (8)

http://colander.altervista.org/advisory/TDGuestBook.txt

http://secunia.com/advisories/20403

Vendor Advisory

http://www.securityfocus.com/bid/18210

http://www.vupen.com/english/advisories/2006/2079

http://colander.altervista.org/advisory/TDGuestBook.txt

http://secunia.com/advisories/20403

Vendor Advisory

http://www.securityfocus.com/bid/18210

http://www.vupen.com/english/advisories/2006/2079

KEV Catalog EPSS Scores Vendors All CVEs