Vulnerabilities > CVE-2006-1980 - Unspecified vulnerability in W2B Online Banking
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN w2b
exploit available
Summary
Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | W2B Online Banking SID Parameter Cross-Site Scripting Vulnerability. CVE-2006-1980. Webapps exploit for php platform |
id | EDB-ID:27710 |
last seen | 2016-02-03 |
modified | 2006-04-20 |
published | 2006-04-20 |
reporter | r0t |
source | https://www.exploit-db.com/download/27710/ |
title | W2B Online Banking SID Parameter Cross-Site Scripting Vulnerability |
References
- http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html
- http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html
- http://secunia.com/advisories/19717
- http://secunia.com/advisories/19717
- http://www.osvdb.org/24759
- http://www.osvdb.org/24759
- http://www.securityfocus.com/bid/17626
- http://www.securityfocus.com/bid/17626
- http://www.vupen.com/english/advisories/2006/1445
- http://www.vupen.com/english/advisories/2006/1445
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25947
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25947