CVE-2006-1980

Published: Apr 21, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.

Affected (1)

Products: W2b: Online Banking

W2b

1 product

Online Banking

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
W2b Online Banking	All versions

References (12)

http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/19717

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/24759

Source: cve@mitre.org

http://www.securityfocus.com/bid/17626

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1445

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25947

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html