Oasyssoft : Security Vulnerabilities, CVEs, Published In 2006 (Sql injection) CVSS score >= 2
Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection.
Max CVSS
2.6
EPSS Score
0.85%
Published
2006-05-12
Updated
2018-10-18
E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in (1) the id parameter to form_grupo.html, or requests to the (2) archivos/ and (3) files/ directories. NOTE: this issue might be resultant from SQL injection.
Max CVSS
5.0
EPSS Score
0.72%
Published
2006-05-12
Updated
2018-10-18
2 vulnerabilities found