Unscored CVE-2006-2348 EUVD-2006-2349GHSA-755c-p85m-xx96

Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to injec…

Published May 12, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection.

References

20071 third-party-advisory
891 third-party-advisory
20060511 Several flaws in e-business designer (eBD) mailing-list
20060511 Several flaws in e-business designer (eBD) mailing-list
17933 vdb-entry
ADV-2006-1784 vdb-entry
ebd-formgrupo-xss(26475) vdb-entry