CVE-2006-4442

Published: Aug 29, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via the cat_name parameter, related to adding a category. (categories field). NOTE: some details are obtained from third party information.

Affected (6)

Products: Clemens Wacha: Php Iaddressbook

Clemens Wacha

1 product

Php Iaddressbook

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Clemens Wacha Php Iaddressbook	Version 0.91
Clemens Wacha Php Iaddressbook	Version 0.91a
Clemens Wacha Php Iaddressbook	Version 0.92
Clemens Wacha Php Iaddressbook	Version 0.93
Clemens Wacha Php Iaddressbook	Version 0.94
Clemens Wacha Php Iaddressbook	Version 0.9