CVE-2006-2184
- State
- Published
- Severity
- Not scored
- Published
- May 4, 2006
- Updated
- Aug 7, 2024
- Reserved
- May 3, 2006
Description
Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20060512 Vendor dispute of CVE-2006-2184mailing-list
- ADV-2006-1628vdb-entry
- 20060519 Resolved PHPKB vendor dispute (CVE-2006-2184)mailing-list
- http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html
- 19913third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.