Unscored severity · published Apr 21, 2006
CVE-2006-1960
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WL
Wireless Lan Solution Engine · Cisco
2.0; 2.0; 2.1; 2.1; 2.2; 2.2; +22 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1960
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1960
Patch
http://secunia.com/advisories/19736
Patch
http://securitytracker.com/id?1015965
www.assurance.com.au
http://www.assurance.com.au/advisories/200604-cisco.txt
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml
www.osvdb.org
http://www.osvdb.org/24812
www.securityfocus.com
http://www.securityfocus.com/archive/1/431367/30/5490/threaded
More from Wireless Lan Solution Engine
–
CVE-2007-5382
The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Control System (WCS) creates administrator accounts…
–
CVE-2007-1467
Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal…
–
CVE-2006-1961
Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions…
–
CVE-2004-0391
Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers…