CVE-2006-3607

Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php.

• http://ellsec.org/print.php?type=N&item_id=141Exploit, URL Repurposed
• http://www.securityfocus.com/archive/1/438705/100/200/threadedBroken Link
• http://www.securityfocus.com/bid/18735Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27460Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27461Third Party Advisory
• http://ellsec.org/print.php?type=N&item_id=141Exploit, URL Repurposed
• http://www.securityfocus.com/archive/1/438705/100/200/threadedBroken Link
• http://www.securityfocus.com/bid/18735Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27460Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27461Third Party Advisory

Published

Jul 18, 2006

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3601** UNVERIFIABLE ** Unspecified vulnerability in an unspecif…
• CVE-2006-3602Directory traversal vulnerability in jscripts/tiny_mce/tiny_…
• CVE-2006-3603Cross-site scripting (XSS) vulnerability in index.php in Fle…
• CVE-2006-3604Directory traversal vulnerability in FlexWATCH Network Camer…
• CVE-2006-3605Microsoft Internet Explorer 6 allows remote attackers to cau…
• CVE-2006-3606Unspecified vulnerability in Sun Solaris X Inter Client Exch…
• CVE-2006-3608The Gallery module in Simone Vellei Flatnuke 2.5.7 and earli…
• CVE-2006-3609Cross-site scripting (XSS) vulnerability in index.php in Orb…
• CVE-2006-3610index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attac…
• CVE-2006-3611Directory traversal vulnerability in pm.php in Phorum 5 allo…
• CVE-2006-3612Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 al…
• CVE-2006-3613Multiple cross-site scripting (XSS) vulnerabilities in Chamb…