5.8
CVSSv2

CVE-2006-1979

Published: 21/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 585
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote malicious users to inject arbitrary web script or HTML via the homepage parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

manic web mwguest 2.1.0

Exploits

source: wwwsecurityfocuscom/bid/17630/info MWGuest is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content Attacker-supplied HTML and script code would be executed in the context of the affected website, potentially allowing an a ...