← back
CVE-2006-5653

CVE-2006-5653

EPSS 4.8%
Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers a new CVE was assigned.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/28887unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/22663http://securityreason.com/securityalert/1805https://exchange.xforce.ibmcloud.com/vulnerabilities/29939http://www.securityfocus.com/archive/1/450153/100/0/threadedhttp://www.securityfocus.com/archive/1/456273/100/200/threadedhttp://www.securityfocus.com/bid/20832http://www.securitytracker.com/id?1018106http://www.vupen.com/english/advisories/2006/4281