Unrated severityNVD Advisory· Published Jun 6, 2006· Updated Apr 16, 2026
CVE-2006-2837
CVE-2006-2837
Description
Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the x_Comments parameter to guestbookadd.asp.
Affected products
1- cpe:2.3:a:techno_dreams:techno_dreams_guest_book:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.