CVE-2006-3900: Tobias Kloy TP-Book

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the name parameter.

Affected products

• Tobias Kloy TP-Book: up to and including 1.00

Published 2006-07-27. Last modified 2026-06-16.