Approved changes feed: RSS · Atom

cpe:2.3:a:lycos:htmlgear_guestgear:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLycos (3ae5892d-c944-5c03-b066-0bcc4fc8a6e3)
ProductHtmlgear Guestgear (891c9f5d-2133-5d65-915a-4b4b8e044c9c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2808 vulnerable 2026-06-08 04:49:07.601228 Details available
Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element, followed by a double ">", which might bypass cleansing operations.
Published: 2006-06-05T17:00:00.000Z
Updated: 2024-08-07T18:06:26.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1493 vulnerable 2026-06-08 04:46:23.860030 Details available
Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:26:28.656Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.