CVE-2006-1980

W2B Online Banking - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by r0t · textwebappsphp

https://www.exploit-db.com/exploits/27710

View Code ZIP pw:eip

References (6)

[Third Party Advisory] http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html

[Vendor Advisory] http://secunia.com/advisories/19717

[Exploit] http://www.securityfocus.com/bid/17626

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/25947

[Third Party Advisory, VDB Entry] http://www.osvdb.org/24759

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/1445

Scores

EPSS 0.0062

EPSS Percentile 69.7%

Classification

Status draft

Affected Products (1)

w2b/online_banking

Timeline

Published Apr 21, 2006

Tracked Since Feb 18, 2026