Vulnerabilities

TI-2006-02289 CVE-2006-2349 · GHSA-7h53-8jvg-g82x

E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify…

MEDIUM 42

E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to (1) common/html_editor/image_browser.upload.html, (2) common/ht…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08923 Published 2006-05-12 No fix listed

TI-2006-02288 CVE-2006-2348 · GHSA-755c-p85m-xx96

Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD)…

LOW 16

Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01229 Published 2006-05-12 No fix listed

TI-2006-02287 CVE-2006-2347 · GHSA-5hmh-qwj4-xcc3

E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full…

LOW 26

E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in (1) the id parameter to form_grupo.html, or requests…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01348 Published 2006-05-12 No fix listed

Vulnerabilities

Filters

E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify…

Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD)…

E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full…