Approved changes feed: RSS · Atom

cpe:2.3:a:softbizscripts:banner_exchange_script:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSoftbizscripts (51b084c4-9a1a-5a2e-a5ca-ccc40d84b97c)
ProductBanner Exchange Script (23fb96ea-eebe-5c1b-b17a-229265294ffa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3607 vulnerable 2026-06-03 14:27:35.484764 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php.
Published: 2006-07-14T21:00:00.000Z
Updated: 2024-08-07T18:39:52.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.