NVD

Id
62281  
Name
CVE-2006-3607  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2008-09-05  
Seq
2006-3607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322711 62281 CVE-2006-3607 http://ellsec.org/print.php?type=N&item_id=141  View
322712 62281 CVE-2006-3607 20060629 Softbiz Banner Exchange 1.0 XSS  View
322713 62281 CVE-2006-3607 18735  View
322714 62281 CVE-2006-3607 softbizbannerexchange-insertmember-xss(27460)  View
322715 62281 CVE-2006-3607 softbizbannerexchange-multiple-xss(27461)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60498 JVNDB-2006-002764 Softbiz Banner Exchange Script におけるクロスサイトスクリプティングの脆弱性 Softbiz Banner Exchange Script には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-3607 19709 CVE-2006-3607 62281 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002764.html 2006-07-18 2012-12-20 View