Unscored severity · published Mar 26, 2006
CVE-2006-1394
Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Pubcookie · University OF Washington
3.0.0; 3.1.0; 3.1.1; 3.2.0; 3.2.1; 3.2.1a; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1394
Patch
http://pubcookie.org/news/20060306-apps-secadv.html
secunia.com
http://secunia.com/advisories/19348
Patch
http://www.kb.cert.org/vuls/id/314540
www.osvdb.org
http://www.osvdb.org/24520
www.securityfocus.com
http://www.securityfocus.com/bid/17221
More from Pubcookie
–
CVE-2006-1392
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before…
–
CVE-2006-1393
Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2…