Vulnerability Details CVE-2006-2140
Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter to members.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.4%
CVSS Severity
CVSS v2 Score 5.8
References
- http://pridels0.blogspot.com/2006/04/orbithyip-xss.html
- http://secunia.com/advisories/19877
- http://www.osvdb.org/25141
- http://www.osvdb.org/25142
- http://www.securityfocus.com/bid/17766
- http://www.vupen.com/english/advisories/2006/1583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26163
- http://pridels0.blogspot.com/2006/04/orbithyip-xss.html
- http://secunia.com/advisories/19877
- http://www.osvdb.org/25141
- http://www.osvdb.org/25142
- http://www.securityfocus.com/bid/17766
- http://www.vupen.com/english/advisories/2006/1583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26163
Products affected by CVE-2006-2140
-
cpe:2.3:a:orbitscripts:orbithyip:2.0