Vulnerability Details CVE-2007-3174
Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the adtype parameter, a different vector than CVE-2006-1980.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://osvdb.org/37465
- http://pridels-team.blogspot.com/2007/05/w2b-online-banking-vuln.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34594
- http://osvdb.org/37465
- http://pridels-team.blogspot.com/2007/05/w2b-online-banking-vuln.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34594
Products affected by CVE-2007-3174
-
cpe:2.3:a:w2b:online_banking:*