← Database

CVE-2006-3852

MEDIUM CVSS: 4.3 Published: 2006-07-25 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment ("text") fields.

Affected Platforms

Phptoys Micro Guestbook

Weakness Type

NVD-CWE-Other

References