CVE-2006-0603

Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) location, (2) website, or (3) message parameter.

• CWE-79

• http://evuln.com/vulns/58/summary.htmlVendor Advisory
• http://secunia.com/advisories/18758Patch, Vendor Advisory
• http://securitytracker.com/id?1015620
• http://www.securityfocus.com/archive/1/424740/100/0/threaded
• http://www.securityfocus.com/bid/16541
• http://www.vupen.com/english/advisories/2006/0480Vendor Advisory
• http://evuln.com/vulns/58/summary.htmlVendor Advisory
• http://secunia.com/advisories/18758Patch, Vendor Advisory
• http://securitytracker.com/id?1015620
• http://www.securityfocus.com/archive/1/424740/100/0/threaded
• http://www.securityfocus.com/bid/16541
• http://www.vupen.com/english/advisories/2006/0480Vendor Advisory

Published

Feb 8, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0593Cross-site scripting (XSS) vulnerability in PHP-Fusion befor…
• CVE-2006-0597Multiple stack-based buffer overflows in elogd.c in elog bef…
• CVE-2006-0598Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allo…
• CVE-2006-0599The (1) elog.c and (2) elogd.c components in elog before 2.5…
• CVE-2006-0600elog before 2.5.7 r1558-4 allows remote attackers to cause a…
• CVE-2006-0602Multiple SQL injection vulnerabilities in Hinton Design phph…
• CVE-2006-0604check.php in Hinton Design phphg Guestbook 1.2 does not chec…
• CVE-2006-0605Multiple cross-site scripting (XSS) vulnerabilities in Unkno…
• CVE-2006-0606SQL injection vulnerability in Unknown Domain Shoutbox 2005.…
• CVE-2006-0607check.php in Hinton Design phphd 1.0 does not check password…
• CVE-2006-0608Multiple SQL injection vulnerabilities in Hinton Design phph…
• CVE-2006-0609Cross-site scripting (XSS) vulnerability in add.php in Hinto…