CVE-2006-3607

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Softbiz Banner Exchange by injecting a malicious script via the PHPSESSID cookie in a GET request to lostpassword.php. The script executes in the context of the affected site, potentially stealing credentials or performing other malicious actions.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Softbiz Banner Exchange by injecting a malicious script into the 'city' parameter of a POST request to 'insertmember.php'. The script executes in the context of the affected site, potentially allowing an attacker to steal cookies or perform other malicious actions.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Softbiz Banner Exchange by injecting a malicious script via the PHPSESSID cookie. The script executes in the context of the affected site, potentially stealing authentication credentials.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Softbiz Banner Exchange by injecting a malicious script via the PHPSESSID cookie. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.