medium4.3
CVE-2007-3174
Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parame…
Impact
Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| W2b | Online Banking | All versions |
References
- NVD record
- CVE.org record
- http://osvdb.org/37465
- http://pridels-team.blogspot.com/2007/05/w2b-online-banking-vuln.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34594
- http://osvdb.org/37465
- http://pridels-team.blogspot.com/2007/05/w2b-online-banking-vuln.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34594