CVE-2006-2994
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow...
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter).
Exploit likelihood
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter).
- Record
CVE-2006-2994- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter).
- Record
CVE-2006-2994- Updated
- 2026-11-02
EUVDEUVD-2006-2991 No score
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter).
- Record
EUVD-2006-2991- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fjx2-chrg-qhrf No score
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow...
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter).
- Record
GHSA-fjx2-chrg-qhrf- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2994 is a medium vulnerability (CVSS 5.8) in Christian Becher Phazizguestbook, published June 13, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/27065
securityreason.com/securityalert/1081
secunia.com/advisories/20615
securityfocus.com/bid/18495
vupen.com/english/advisories/2006/2421
nvd.nist.gov/vuln/detail/CVE-2006-2994
github.com/advisories/GHSA-fjx2-chrg-qhrf