CVE-2006-1699

Published: Apr 11, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode.

Affected (1)

Products: Aweb: Banner Generator

Aweb

1 product

Banner Generator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aweb Banner Generator	version ≤ 3.0

References (10)

http://secunia.com/advisories/19621

Source: cve@mitre.org

http://securitytracker.com/id?1015877

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/17416

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1348

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25782

Source: cve@mitre.org

http://secunia.com/advisories/19621