2.6
CVE-2006-1980
- EPSS 1.95%
- Veröffentlicht 21.04.2006 22:02:00
- Zuletzt bearbeitet 16.06.2026 22:24:03
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.95% | 0.776 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.6 | 4.9 | 2.9 |
AV:N/AC:H/Au:N/C:N/I:P/A:N
|
http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html
http://secunia.com/advisories/19717
http://www.osvdb.org/24759
http://www.securityfocus.com/bid/17626
http://www.vupen.com/english/advisories/2006/1445
https://exchange.xforce.ibmcloud.com/vulnerabilities/25947