CVE-2006-2178

Multiple cross-site scripting XSS vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the 1 SessionID parameter to login.asp, 2 ProductIndex parameter to browse0.htm, 3 rowcolor parameter to result.asp, or 4 heading parameter to result.asp. NOTE: vector...

CVE-2006-2178

CVE-2006-2178 affects CyberBuild with multiple cross-site scripting (XSS) vulnerabilities. The affected components are the login.asp page (SessionID parameter), browse0.htm (ProductIndex parameter), and result.asp (rowcolor and heading parameters). The description notes that vectors 1 and 2 may b...