Description
Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex parameter to browse0.htm, (3) rowcolor parameter to result.asp, or (4) heading parameter to result.asp. NOTE: vectors 1 and 2 might be resultant from SQL injection.
Exploits (3)
References (8)
Core 8
Core References
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1630
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/25198
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/25199
Exploit vdb-entry
x_refsource_osvdb
http://www.osvdb.org/25197
Third Party Advisory x_refsource_misc
http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/17829
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26202
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19889
Scores
EPSS
0.0072
EPSS Percentile
72.6%
Details
CWE
CWE-79
Status
published
Products (1)
smartwin_technology/cyberoffice_warehouse_builder
Published
May 04, 2006
Tracked Since
Feb 18, 2026