Vulnerability in Softbizscripts Banner Exchange Script
CVE-2006-3607
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php.
EPSS: 0.017 (75.3th percentile) — read the EPSS interpretation.
Affected products
- Softbizscripts Banner_exchange_script — versions 1.0
- N/a — versions n/a
References
- cve@mitre.org (URL Repurposed, Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Broken Link)
- cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_XF)