Unrated severityNVD Advisory· Published Jul 13, 2006· Updated Jun 16, 2026

CVE-2006-3568

Description

Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, or (3) nickname parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fantastic/Guestbook2 versions
cpe:2.3:a:fantastic_guestbook_project:fantastic_guestbook:2.0.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fantastic_guestbook_project:fantastic_guestbook:2.0.1:*:*:*:*:*:*:*
- (no CPE)range: <=2.0.1

Patches

Vulnerability mechanics

References

it.security.netsons.org/exploit/FGB.txtnvdBroken LinkExploitVendor Advisory
secunia.com/advisories/21024nvdBroken LinkExploitVendor Advisory
www.securityfocus.com/bid/18942nvdBroken LinkExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/440152/100/100/threadednvdBroken LinkThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/27697nvdThird Party AdvisoryVDB Entry
www.osvdb.org/27107nvdBroken Link
www.vupen.com/english/advisories/2006/2762nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000