Unscored severity · published Mar 19, 2006
CVE-2006-1290
Multiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) ipAddress,…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) ipAddress, (2) act, (3) username, and (4) unspecified other parameters in (a) authuser.php; and the (5) username and (6) unspecified other parameters in (b) userstatistics.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Milkeyway Captive Portal · Milkeyway
0.1; 0.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1290
secunia.com
http://secunia.com/advisories/19258
securitytracker.com
http://securitytracker.com/id?1015778
www.osvdb.org
http://www.osvdb.org/23932
www.osvdb.org
http://www.osvdb.org/23933
www.securityfocus.com
http://www.securityfocus.com/archive/1/427890/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/17127
More from Milkeyway Captive Portal
–
CVE-2006-1289
Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, (3)…