{"id":"CVE-2006-2572","state":"PUBLISHED","title":"Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4","description":"Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters.","publishedAt":"2006-05-24T23:00:00.000Z","updatedAt":"2024-08-07T17:58:51.336Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www.osvdb.org/25732","http://www.securityfocus.com/archive/1/436615/100/0/threaded","http://www.securityfocus.com/archive/1/434869/100/0/threaded","http://www.securityfocus.com/bid/18310","http://secunia.com/advisories/20201","https://exchange.xforce.ibmcloud.com/vulnerabilities/26629","http://securityreason.com/securityalert/948","http://www.vupen.com/english/advisories/2006/1942"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:43.610Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2006/2xxx/CVE-2006-2572.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2006-2572","state":"PUBLISHED","datePublished":"2006-05-24T23:00:00.000Z","dateUpdated":"2024-08-07T17:58:51.336Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2006-05-24T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www.osvdb.org/25732","name":"25732","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.securityfocus.com/archive/1/436615/100/0/threaded","name":"20060609 Re: DGbook v1.0 - XSS","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/archive/1/434869/100/0/threaded","name":"20060523 DGbook v1.0 - XSS","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/18310","name":"18310","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/20201","name":"20201","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26629","name":"dgbook-index-xss(26629)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://securityreason.com/securityalert/948","name":"948","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://www.vupen.com/english/advisories/2006/1942","name":"ADV-2006-1942","tags":["vdb-entry","x_refsource_VUPEN"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2006-05-23T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-2572","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"25732","refsource":"OSVDB","url":"http://www.osvdb.org/25732"},{"name":"20060609 Re: DGbook v1.0 - XSS","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/436615/100/0/threaded"},{"name":"20060523 DGbook v1.0 - XSS","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/434869/100/0/threaded"},{"name":"18310","refsource":"BID","url":"http://www.securityfocus.com/bid/18310"},{"name":"20201","refsource":"SECUNIA","url":"http://secunia.com/advisories/20201"},{"name":"dgbook-index-xss(26629)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26629"},{"name":"948","refsource":"SREASON","url":"http://securityreason.com/securityalert/948"},{"name":"ADV-2006-1942","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1942"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.osvdb.org/25732","name":"25732","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/436615/100/0/threaded","name":"20060609 Re: DGbook v1.0 - XSS","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/434869/100/0/threaded","name":"20060523 DGbook v1.0 - XSS","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/18310","name":"18310","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/20201","name":"20201","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26629","name":"dgbook-index-xss(26629)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securityreason.com/securityalert/948","name":"948","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/1942","name":"ADV-2006-1942","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T17:58:51.336Z"}}]}}}