CVEvulnerability
CVE-2006-1980
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-04-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.
Affected configurations
• w2b online banking
References
- http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19717 Vendor Advisory
- http://www.osvdb.org/24759 www.osvdb.org
- http://www.securityfocus.com/bid/17626 Exploit
- http://www.vupen.com/english/advisories/2006/1445 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25947 exchange.xforce.ibmcloud.com
- http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/19717 Vendor Advisory
- http://www.osvdb.org/24759 www.osvdb.org
- http://www.securityfocus.com/bid/17626 Exploit
- http://www.vupen.com/english/advisories/2006/1445 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25947 exchange.xforce.ibmcloud.com