CVE-2006-4577

Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) email, (2) websites, and (3) groupAddName parameters in (a) save.php; the (4) errorMsg parameter in (b) index.php; and the (5) goTo and (6) search parameters in (c) search.php.

• http://osvdb.org/32564
• http://osvdb.org/32565
• http://osvdb.org/32566
• http://secunia.com/advisories/21694Exploit, Vendor Advisory
• http://secunia.com/secunia_research/2006-76/advisory/Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/21870
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31240
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31247
• http://osvdb.org/32564
• http://osvdb.org/32565
• http://osvdb.org/32566
• http://secunia.com/advisories/21694Exploit, Vendor Advisory
• http://secunia.com/secunia_research/2006-76/advisory/Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/21870
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31240
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31247

Published

Dec 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4571Multiple unspecified vulnerabilities in Firefox before 1.5.0…
• CVE-2006-4572ip6_tables in netfilter in the Linux kernel before 2.6.16.31…
• CVE-2006-4573Multiple unspecified vulnerabilities in the "utf8 combining …
• CVE-2006-4574Off-by-one error in the MIME Multipart dissector in Wireshar…7.5
• CVE-2006-4575Multiple SQL injection vulnerabilities in The Address Book 1…
• CVE-2006-4576Cross-site scripting (XSS) vulnerability in The Address Book…
• CVE-2006-4578export.php in The Address Book 1.04e writes username and pas…
• CVE-2006-4579Directory traversal vulnerability in users.php in The Addres…
• CVE-2006-4580register.php in The Address Book 1.04e allows remote attacke…
• CVE-2006-4581Unrestricted file upload vulnerability in The Address Book 1…
• CVE-2006-4582Cross-site request forgery (CSRF) vulnerability in The Addre…
• CVE-2006-4583Multiple PHP remote file inclusion vulnerabilities in FlashC…