How severe is CVE-2006-2184?

CVE-2006-2184 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2006-2184 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-2184?

CVE-2006-2184 affects Chadha Software Technologies Phpkb Knowledge Base. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2006-2184?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-2184 published?

CVE-2006-2184 was published on 2006-05-04 and last updated on 2026-06-16.

CVE-2006-2184

CVE-2006-2184 is a medium-severity vulnerability in Chadha Software Technologies Phpkb Knowledge Base with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 1% (64th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Chadha Software Technologies Phpkb Knowledge Base
Published: 2006-05-04
Last modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."

Frequently asked questions

What is CVE-2006-2184?: Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues."
How severe is CVE-2006-2184?: CVE-2006-2184 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2006-2184 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-2184?: CVE-2006-2184 affects Chadha Software Technologies Phpkb Knowledge Base. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-2184?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-2184 published?: CVE-2006-2184 was published on 2006-05-04 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:chadha_software_technologies:phpkb_knowledge_base:*:*:*:*:*:*:*:*

More vulnerabilities in Chadha Software Technologies Phpkb Knowledge Base

CVE-2008-1909 — High (CVSS 7.5): SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute…

All CVEs affecting Chadha Software Technologies Phpkb Knowledge Base →