{"cve":"CVE-2006-2184","nvd":{"published":"2006-05-04T12:38:00.000","modified":"2026-06-16T22:24:30.030","status":"Modified","description":"Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter.  NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that \"We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues.\"","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html","http://secunia.com/advisories/19913","http://www.attrition.org/pipermail/vim/2006-May/000753.html","http://www.attrition.org/pipermail/vim/2006-May/000775.html","http://www.vupen.com/english/advisories/2006/1628"],"products":["chadha_software_technologies:phpkb_knowledge_base"],"source":"nvd","synced_at":"2026-10-19T19:42:01.759833969+00:00"},"epss":{"cve":"CVE-2006-2184","score":0.01177,"percentile":0.67622,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}