Unscored severity · published Jul 25, 2006
CVE-2006-3841
Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webscarab · Owasp
2006-06-21 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3841
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3841
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047995.html
Patch
http://moritz-naumann.com/adv/0012/webscarabxss/0012.txt
Patch
http://secunia.com/advisories/21114
securityreason.com
http://securityreason.com/securityalert/1276
www.securityfocus.com
http://www.securityfocus.com/archive/1/440441/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/19063