返回 CVE 浏览器

CVE-2006-3616

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.1850%

EPSS Percentile12.93th

Published2006年7月18日

Last Modified2026年4月16日

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php, after the name of an existing file.

Affected Platforms (CPE)

📦

Carbonize

Lazarus Guestbook

<= 1.6

References & Advisories

🔗 http://secunia.com/advisories/21034

🔗 http://securitytracker.com/id?1016486

🔗 http://www.osvdb.org/27089

🔗 http://www.osvdb.org/27090

🔗 http://www.securityfocus.com/archive/1/439904/100/0/threaded

🔗 http://www.securityfocus.com/bid/18956

🔗 http://www.vupen.com/english/advisories/2006/2784

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/27714

相关漏洞威胁

CVE-2007-148610.0

PHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook before 1.7.3 allows remote attackers ...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...