Softbiz : Security Vulnerabilities, CVEs, Published In 2006 (XSS)
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php.
Max CVSS
4.3
EPSS Score
0.89%
Published
2006-07-18
Updated
2018-10-18
Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Max CVSS
6.8
EPSS Score
0.44%
Published
2006-04-07
Updated
2011-03-08
2 vulnerabilities found