Description
Multiple cross-site scripting (XSS) vulnerabilities in The Banner Engine (tbe) 4.0 allow remote attackers to execute arbitrary web script or HTML via the (1) text parameter in a search action to (a) top.php, and the (2) adminpass or (3) adminlogin parameter to (b) signup.php.
References
- 18793 vdb-entry
- 20916 third-party-advisory
- 1204 third-party-advisory
- tbe-signup-top-xss(27549) vdb-entry
- 20060703 TBE 4.0 XSS mailing-list
- ADV-2006-2656 vdb-entry
- 1016432 vdb-entry