CVE-2006-1960: XSS
First published: Fri Apr 21 2006(Updated: )
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Solution Engine | =2.3 | |
| Cisco Wireless LAN Solution Engine | =2.6 | |
| Cisco Wireless LAN Solution Engine | =2.11 | |
| Cisco Wireless LAN Solution Engine | =2.2 | |
| Cisco Wireless LAN Solution Engine | =2.4 | |
| Cisco Wireless LAN Solution Engine | =2.4 | |
| Cisco Wireless LAN Solution Engine | =2.12 | |
| Cisco Wireless LAN Solution Engine | =2.10 | |
| Cisco Wireless LAN Solution Engine | =2.13 | |
| Cisco Wireless LAN Solution Engine | =2.11 | |
| Cisco Wireless LAN Solution Engine | =2.1 | |
| Cisco Wireless LAN Solution Engine | =2.2 | |
| Cisco Wireless LAN Solution Engine | =2.0 | |
| Cisco Wireless LAN Solution Engine | =2.7 | |
| Cisco Wireless LAN Solution Engine | =2.1 | |
| Cisco Wireless LAN Solution Engine | =2.9 | |
| Cisco Wireless LAN Solution Engine | =2.5 | |
| Cisco Wireless LAN Solution Engine | =2.9 | |
| Cisco Wireless LAN Solution Engine | =2.7 | |
| Cisco Wireless LAN Solution Engine | =2.8 | |
| Cisco Wireless LAN Solution Engine | =2.12 | |
| Cisco Wireless LAN Solution Engine | =2.5 | |
| Cisco Wireless LAN Solution Engine | =2.0 | |
| Cisco Wireless LAN Solution Engine | =2.3 | |
| Cisco Wireless LAN Solution Engine | =2.8 | |
| Cisco Wireless LAN Solution Engine | =2.6 | |
| Cisco Wireless LAN Solution Engine | =2.13 | |
| Cisco Wireless LAN Solution Engine | =2.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml
- http://securitytracker.com/id?1015965
- http://secunia.com/advisories/19736
- http://www.assurance.com.au/advisories/200604-cisco.txt
- http://www.securityfocus.com/bid/17604
- http://www.osvdb.org/24812
- http://www.vupen.com/english/advisories/2006/1434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25883
- http://www.securityfocus.com/archive/1/431371/30/5490/threaded
- http://www.securityfocus.com/archive/1/431367/30/5490/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco wireless lan solution engine
- version/cisco wireless lan solution engine/2.3
- version/cisco wireless lan solution engine/2.6
- version/cisco wireless lan solution engine/2.11
- version/cisco wireless lan solution engine/2.2
- version/cisco wireless lan solution engine/2.4
- version/cisco wireless lan solution engine/2.12
- version/cisco wireless lan solution engine/2.10
- version/cisco wireless lan solution engine/2.13
- version/cisco wireless lan solution engine/2.1
- version/cisco wireless lan solution engine/2.0
- version/cisco wireless lan solution engine/2.7
- version/cisco wireless lan solution engine/2.9
- version/cisco wireless lan solution engine/2.5
- version/cisco wireless lan solution engine/2.8