CVE-2006-3211

Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter.

• CWE-79

• http://secunia.com/advisories/20751Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/1141Third Party Advisory
• http://www.securityfocus.com/archive/1/438008/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/18556Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/2488Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27322Third Party Advisory, VDB Entry
• http://secunia.com/advisories/20751Broken Link, Vendor Advisory
• http://securityreason.com/securityalert/1141Third Party Advisory
• http://www.securityfocus.com/archive/1/438008/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/18556Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/2488Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27322Third Party Advisory, VDB Entry

Published

Jun 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3205Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote att…
• CVE-2006-3206register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier a…
• CVE-2006-3207Directory traversal vulnerability in newpost.php in Ultimate…
• CVE-2006-3208Direct static code injection vulnerability in Ultimate PHP B…
• CVE-2006-3209The Task scheduler (at.exe) on Microsoft Windows XP spawns e…
• CVE-2006-3210Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0…
• CVE-2006-3212Cross-site scripting (XSS) vulnerability in sign.php in cjGu…
• CVE-2006-3213SQL injection vulnerability in WeBBoA Hosting 1.1 allows rem…
• CVE-2006-3214Unspecified vulnerability in Hitachi Groupmax Address Server…
• CVE-2006-3215Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweepe…
• CVE-2006-3216Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweepe…
• CVE-2006-3217JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earli…