Vulnerability CVE-2006-1394

Vulnerability CVE-2006-1394

Published: 2006-03-26 Modified: 2012-02-12

Description:

Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
4.3/10	2.9/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
None	Partial	None

Affected software
University of washington -> Pubcookie

References:

http://www.kb.cert.org/vuls/id/314540

http://pubcookie.org/news/20060306-apps-secadv.html

http://www.securityfocus.com/bid/17221

http://www.osvdb.org/24520

http://secunia.com/advisories/19348

Copyright 2024, cxsecurity.com