CVE-2006-3289

2006-06-2823:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

74.7%

JSON

Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a “malicious URL”.

References

secunia.com/advisories/20870

securitytracker.com/id?1016398

www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

www.osvdb.org/26880

www.securityfocus.com/bid/18701

www.vupen.com/english/advisories/2006/2583

exchange.xforce.ibmcloud.com/vulnerabilities/27441