CVE-2006-2837

no score yetEPSS 1.2%

Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the x_Comments parameter to guestbookadd.asp.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
Published: 2006-06-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

techno_dreams:techno_dreams_guest_book

References

http://colander.altervista.org/advisory/TDGuestBook.txt
http://secunia.com/advisories/20403
http://www.securityfocus.com/bid/18210
http://www.vupen.com/english/advisories/2006/2079
http://colander.altervista.org/advisory/TDGuestBook.txt

Check your stack JSON