CVE-2006-2140

Published: May 2, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter to members.php.

Affected (1)

Products: Orbitscripts: Orbithyip

Orbitscripts

1 product

Orbithyip

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Orbitscripts Orbithyip	Version 2.0

References (14)

http://pridels0.blogspot.com/2006/04/orbithyip-xss.html

Source: cve@mitre.org

http://secunia.com/advisories/19877

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/25141

Source: cve@mitre.org

http://www.osvdb.org/25142

Source: cve@mitre.org

http://www.securityfocus.com/bid/17766

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1583

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26163

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/04/orbithyip-xss.html