CVE-2006-2348: Undefined Security Weakness

Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

CVE-2006-2347: Undefined Security Weakness

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...