Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base...

4.3 CVSS

Vulnerability Description

Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2184

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from chadha software technologies

View All →

CVE-2008-1909

SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB)...

High 7.5

Affected Vendor

chadha software technologies

View all reports →

Affected Software

phpkb knowledge base

Vulnerable Versions:

Timeline

Official Publish: May 4th, 2006

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.