Back
CVE-2006-2184
Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or…
Medium4.3EPSS 1.2%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
- EPSS (exploitation in 30 days)
- 1.2% · top 32% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (5)
- 20060512 Vendor dispute of CVE-2006-2184 (opens in a new tab)mailing-listx_refsource_VIMx_transferred
- ADV-2006-1628 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 20060519 Resolved PHPKB vendor dispute (CVE-2006-2184) (opens in a new tab)mailing-listx_refsource_VIMx_transferred
- http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html (opens in a new tab)x_refsource_MISCx_transferred
- 19913 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2006-2184)Record last updated .