CVE-2006-2140 Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter....
MediumCVSS 5.8
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the (1) referral parameter to signup.php or (2) id parameter to members.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| orbitscripts orbithyip | = 2.0 | No fix listed |
References
- pridels0.blogspot.com
- 19877 third-party-advisory vendor-advisory
- 25141 vdb-entry
- 25142 vdb-entry
- 17766 vdb-entry
- ADV-2006-1583 vdb-entry
- orbithyip-signup-members-xss(26163) vdb-entry