Unscored severity · published Mar 26, 2006
CVE-2006-1392
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified inputs.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Pubcookie · University OF Washington
3.0.0; 3.1.0; 3.1.1; 3.2.0; 3.2.1; 3.2.1a; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1392
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1392
Patch
http://pubcookie.org/news/20060306-login-secadv.html
Patch
http://secunia.com/advisories/19348
Patch
http://www.kb.cert.org/vuls/id/337585
www.osvdb.org
http://www.osvdb.org/24521
www.securityfocus.com
http://www.securityfocus.com/bid/17221
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25427
More from Pubcookie
–
CVE-2006-1393
Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2…
–
CVE-2006-1394
Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2…