Unrated severityNVD Advisory· Published Jun 5, 2006· Updated Jun 16, 2026
CVE-2006-2808
CVE-2006-2808
Description
Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element, followed by a double ">", which might bypass cleansing operations.
Affected products
2- cpe:2.3:a:lycos:htmlgear_guestgear:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.