CVE-2006-2637

no score yetEPSS 2.0%

Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2) Pretty Guestbook 1, and (3) Smile Guestbook 1 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the pagina parameter.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
Published: 2006-05-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

tuttophp:morris_guestbook
tuttophp:pretty_guestbook
tuttophp:smile_guestbook

References

http://secunia.com/advisories/20320
http://secunia.com/advisories/20321
http://secunia.com/advisories/20322
http://securityreason.com/securityalert/973
http://www.securityfocus.com/archive/1/435171/100/0/threaded

Check your stack JSON