Skip to content

CVE-2006-3260

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to...

4.3 Medium

CVE-2006-3260 is a medium vulnerability (CVSS 4.3) in Virtual Design Studios Vlbook, published June 27, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.43%, the 73rd percentile. No source names a fixed version.

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Exploit likelihood

1.43%Unchanged since Feb 4, 2022

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: CVE-2006-3260
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: CVE-2006-3260
Updated: 2026-11-02

EUVDEUVD-2006-3257 No score

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: EUVD-2006-3257
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2q7x-4q74-5fv4 No score

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to...

Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Record: GHSA-2q7x-4q74-5fv4
Updated: 2026-11-02

Affected products

virtual design studios vlbook

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References

Show 4 moreShow less