← volver
CVE-2006-1960

CVE-2006-1960

EPSS 5.3%
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/27684no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://secunia.com/advisories/19736http://securitytracker.com/id?1015965https://exchange.xforce.ibmcloud.com/vulnerabilities/25883http://www.assurance.com.au/advisories/200604-cisco.txthttp://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtmlhttp://www.osvdb.org/24812http://www.securityfocus.com/archive/1/431367/30/5490/threadedhttp://www.securityfocus.com/archive/1/431371/30/5490/threadedhttp://www.securityfocus.com/bid/17604http://www.vupen.com/english/advisories/2006/1434