CVE-2006-2178

CVE-2006-2178 affects CyberBuild with multiple cross-site scripting (XSS) vulnerabilities. The affected components are the login.asp page (SessionID parameter), browse0.htm (ProductIndex parameter), and result.asp (rowcolor and heading parameters). The description notes that vectors 1 and 2 may b...

CVE-2006-2179

CVE-2006-2179 refers to multiple SQL injection vulnerabilities in CyberBuild. The affected components are the login.asp interface (SessionID parameter) and browse0.htm (ProductIndex parameter). The underlying issue is improper handling of user-supplied input, allowing remote attackers to craft SQ...