CVE-2006-1960: XSS
First published: Fri Apr 21 2006(Updated: )
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Solution Engine | =2.3 | |
| Cisco Wireless LAN Solution Engine | =2.6 | |
| Cisco Wireless LAN Solution Engine | =2.11 | |
| Cisco Wireless LAN Solution Engine | =2.2 | |
| Cisco Wireless LAN Solution Engine | =2.4 | |
| Cisco Wireless LAN Solution Engine | =2.4 | |
| Cisco Wireless LAN Solution Engine | =2.12 | |
| Cisco Wireless LAN Solution Engine | =2.10 | |
| Cisco Wireless LAN Solution Engine | =2.13 | |
| Cisco Wireless LAN Solution Engine | =2.11 | |
| Cisco Wireless LAN Solution Engine | =2.1 | |
| Cisco Wireless LAN Solution Engine | =2.2 | |
| Cisco Wireless LAN Solution Engine | =2.0 | |
| Cisco Wireless LAN Solution Engine | =2.7 | |
| Cisco Wireless LAN Solution Engine | =2.1 | |
| Cisco Wireless LAN Solution Engine | =2.9 | |
| Cisco Wireless LAN Solution Engine | =2.5 | |
| Cisco Wireless LAN Solution Engine | =2.9 | |
| Cisco Wireless LAN Solution Engine | =2.7 | |
| Cisco Wireless LAN Solution Engine | =2.8 | |
| Cisco Wireless LAN Solution Engine | =2.12 | |
| Cisco Wireless LAN Solution Engine | =2.5 | |
| Cisco Wireless LAN Solution Engine | =2.0 | |
| Cisco Wireless LAN Solution Engine | =2.3 | |
| Cisco Wireless LAN Solution Engine | =2.8 | |
| Cisco Wireless LAN Solution Engine | =2.6 | |
| Cisco Wireless LAN Solution Engine | =2.13 | |
| Cisco Wireless LAN Solution Engine | =2.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml
- http://securitytracker.com/id?1015965
- http://secunia.com/advisories/19736
- http://www.assurance.com.au/advisories/200604-cisco.txt
- http://www.securityfocus.com/bid/17604
- http://www.osvdb.org/24812
- http://www.vupen.com/english/advisories/2006/1434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25883
- http://www.securityfocus.com/archive/1/431371/30/5490/threaded
- http://www.securityfocus.com/archive/1/431367/30/5490/threaded
Frequently Asked Questions
What is the severity of CVE-2006-1960?
CVE-2006-1960 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2006-1960?
To fix CVE-2006-1960, update your Cisco Wireless LAN Solution Engine to version 2.13 or later.
What systems are affected by CVE-2006-1960?
CVE-2006-1960 affects multiple versions of Cisco Wireless LAN Solution Engine, specifically versions before 2.13.
What type of vulnerability is CVE-2006-1960?
CVE-2006-1960 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web script or HTML.
Can CVE-2006-1960 be exploited remotely?
Yes, CVE-2006-1960 can be exploited remotely, allowing attackers to potentially compromise users accessing the vulnerable web interface.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco wireless lan solution engine
- version/cisco wireless lan solution engine/2.3
- version/cisco wireless lan solution engine/2.6
- version/cisco wireless lan solution engine/2.11
- version/cisco wireless lan solution engine/2.2
- version/cisco wireless lan solution engine/2.4
- version/cisco wireless lan solution engine/2.12
- version/cisco wireless lan solution engine/2.10
- version/cisco wireless lan solution engine/2.13
- version/cisco wireless lan solution engine/2.1
- version/cisco wireless lan solution engine/2.0
- version/cisco wireless lan solution engine/2.7
- version/cisco wireless lan solution engine/2.9
- version/cisco wireless lan solution engine/2.5
- version/cisco wireless lan solution engine/2.8