CVEvulnerability
CVE-2006-3956
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) AccountUsername and (3) Message parameters.
Affected configurations
• total online solutions advanced webhost billing system 2.2.2
References
- http://secunia.com/advisories/21296 Vendor Advisory
- http://securityreason.com/securityalert/1317 securityreason.com
- http://www.osvdb.org/27629 www.osvdb.org
- http://www.securityfocus.com/archive/1/441532/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19226 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3061 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28069 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/21296 Vendor Advisory
- http://securityreason.com/securityalert/1317 securityreason.com
- http://www.osvdb.org/27629 www.osvdb.org
- http://www.securityfocus.com/archive/1/441532/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19226 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3061 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28069 exchange.xforce.ibmcloud.com