CVE-2006-3607

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2006-3607
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://ellsec.org/print.php?type=N&item_id=141 Exploit URL Repurposed
http://www.securityfocus.com/archive/1/438705/100/200/threaded Broken Link
http://www.securityfocus.com/bid/18735 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/27460 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27461 Third Party Advisory
http://ellsec.org/print.php?type=N&item_id=141 Exploit URL Repurposed
http://www.securityfocus.com/archive/1/438705/100/200/threaded Broken Link
http://www.securityfocus.com/bid/18735 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/27460 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27461 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:softbizscripts:banner_exchange_script:1.0:*:*:*:*:*:*:*
History

06 Apr 2026, 14:41

Type Values Removed Values Added
References () http://www.securityfocus.com/archive/1/438705/100/200/threaded - () http://www.securityfocus.com/archive/1/438705/100/200/threaded - Broken Link
References () http://www.securityfocus.com/bid/18735 - Exploit () http://www.securityfocus.com/bid/18735 - Broken Link
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27460 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27460 - Third Party Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27461 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27461 - Third Party Advisory
CPE cpe:2.3:a:softbiz:banner_exchange:1.0:*:*:*:*:*:*:* cpe:2.3:a:softbizscripts:banner_exchange_script:1.0:*:*:*:*:*:*:*
First Time Softbizscripts
Softbizscripts banner Exchange Script

21 Nov 2024, 00:14

Type Values Removed Values Added
References () http://ellsec.org/print.php?type=N&item_id=141 - Exploit, URL Repurposed () http://ellsec.org/print.php?type=N&item_id=141 - Exploit, URL Repurposed
References () http://www.securityfocus.com/archive/1/438705/100/200/threaded - () http://www.securityfocus.com/archive/1/438705/100/200/threaded -
References () http://www.securityfocus.com/bid/18735 - Exploit () http://www.securityfocus.com/bid/18735 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27460 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27460 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/27461 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/27461 -

14 Feb 2024, 01:17

Type Values Removed Values Added
References (MISC) http://ellsec.org/print.php?type=N&item_id=141 - Exploit (MISC) http://ellsec.org/print.php?type=N&item_id=141 - Exploit, URL Repurposed
Information

Published : 2006-07-18 15:46

Updated : 2026-04-06 14:41

NVD link : CVE-2006-3607

Mitre link : CVE-2006-3607

CVE.ORG link : CVE-2006-3607

JSON object : View

Products Affected

softbizscripts

  • banner_exchange_script
CWE
NVD-CWE-Other