CVE-2006-2178
CyberOffice Warehouse Builder - Cross-Site Scripting via SessionID Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-2178. PoCs published by r0t.
AI-analyzed exploit summary The provided text describes multiple input-validation vulnerabilities in CyberBuild, including XSS and SQL injection, but does not contain actual exploit code. It includes example URLs demonstrating XSS injection points.
Description
Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex parameter to browse0.htm, (3) rowcolor parameter to result.asp, or (4) heading parameter to result.asp. NOTE: vectors 1 and 2 might be resultant from SQL injection.
Exploits (3)
The provided text describes multiple input-validation vulnerabilities in CyberBuild, including XSS and SQL injection, but does not contain actual exploit code. It includes example URLs demonstrating XSS injection points.
The provided text describes input-validation vulnerabilities in CyberBuild, including XSS and SQL injection, but does not contain functional exploit code. It references a generic example URL for XSS demonstration.
The provided text describes input-validation vulnerabilities in CyberBuild, including XSS and SQL injection, but does not contain functional exploit code. It references a SecurityFocus BID and provides a generic XSS example URL.