aweb records
2 published records for vendor aweb.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2006-1700No exploit | Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attaaweb · scripts seller | High7.5 | — | 1.7% | Apr 11, 2006 |
11Monitor | CVE-2006-1699Proof of concept | Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary waweb · banner generator | Low2.6 | — | 1.7% | Apr 11, 2006 |
- CVE-2006-170031Monitor
Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote atta
HighCVSS 7.5No exploitEPSS 1%aweb · scripts sellerApr 11, 2006
- CVE-2006-169911Monitor
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary w
LowCVSS 2.6Proof of conceptEPSS 1%aweb · banner generatorApr 11, 2006