CVE-2006-2178

EPSS 1.5%

Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex parameter to browse0.htm, (3) rowcolor parameter to result.asp, or (4) heading parameter to result.asp. NOTE: vectors 1 and 2 might be resultant from SQL injection.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/27817unverified exploitdbwww.exploit-db.com/exploits/27816unverified exploitdbwww.exploit-db.com/exploits/27815unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html http://secunia.com/advisories/19889 https://exchange.xforce.ibmcloud.com/vulnerabilities/26202 http://www.osvdb.org/25197 http://www.osvdb.org/25198 http://www.osvdb.org/25199 http://www.securityfocus.com/bid/17829 http://www.vupen.com/english/advisories/2006/1630