CVE-2006-1786
published 2006-04-13CVE-2006-1786: Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via…
PriorityP418low2.6CVSS 2.0
AVNACHAuNCNIPAN
EXPLOIT
EPSS
11.85%
95.6th percentile
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses this issue.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | document_server | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
freeSSHd 1.0.9 - Key Exchange Algorithm Buffer Overflow
exploitdb·2006-05-15
CVE-2006-2407 freeSSHd 1.0.9 - Key Exchange Algorithm Buffer Overflow
freeSSHd 1.0.9 - Key Exchange Algorithm Buffer Overflow
---
#!/usr/bin/env python
"""
Coded by Tauqeer Ahmad a.k.a 0x-Scientist-x0
ahmadtauqeer[at]yahoo.com
Disclaimer: This Proof of concept exploit is for educational purpose only.
Please do not use it against any system without prior permission.
You are responsible for yourself for what you do with this code.
Greetings: All the Pakistani White Hats including me ;)
Flames: To all the skript kiddies out there. Man grow up!.
Code tasted against freeSSHd version 1.0.9
If you didn't get shell at first try, try few times and you will get lucky
Advisories:
https://www.securityfocus.com/bid/17958
http://www.frsirt.com/english/advisories/2006/1786
"""
import socket
import getopt
import sys
host = "192.168.0.2"
port = 0
eip =""
#/* win32_bi
Exploit-DB
Adobe Document Server 6.0 Extensions - 'AlterCast?op' Cross-Site Scripting
exploitdb·2006-04-13
CVE-2006-1786 Adobe Document Server 6.0 Extensions - 'AlterCast?op' Cross-Site Scripting
Adobe Document Server 6.0 Extensions - 'AlterCast?op' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/17500/info
Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to:
- perform cross-site scripting attacks
- gain access to potentially sensitive information
- bypass security restrictions to gain administrative access to the application.
Adobe Document Server for Reader Extensions version 6.0, included with Adobe Graphics Server 2.1 and Adobe Document Server 6.0, is vulnerable; other versions may also be affected.
http://www.example.com:8019/altercast/AlterCast?op=[code]
Exploit-DB
Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting
exploitdb·2006-04-13
CVE-2006-1786 Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting
Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting
---
source: https://www.securityfocus.com/bid/17500/info
Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to:
- perform cross-site scripting attacks
- gain access to potentially sensitive information
- bypass security restrictions to gain administrative access to the application.
Adobe Document Server for Reader Extensions version 6.0, included with Adobe Graphics Server 2.1 and Adobe Document Server 6.0, is vulnerable; other versions may also be affected.
http://www.example.com:8019/ads-readerext/ads-readerext?actionID=[code]
No writeups or analysis indexed.
http://secunia.com/advisories/15924http://secunia.com/secunia_research/2005-68/advisory/http://www.adobe.com/support/techdocs/322699.htmlhttp://www.osvdb.org/24589http://www.osvdb.org/24590http://www.securityfocus.com/archive/1/430869/100/0/threadedhttp://www.securityfocus.com/bid/17500http://www.vupen.com/english/advisories/2006/1342https://exchange.xforce.ibmcloud.com/vulnerabilities/25771http://secunia.com/advisories/15924http://secunia.com/secunia_research/2005-68/advisory/http://www.adobe.com/support/techdocs/322699.htmlhttp://www.osvdb.org/24589http://www.osvdb.org/24590http://www.securityfocus.com/archive/1/430869/100/0/threadedhttp://www.securityfocus.com/bid/17500http://www.vupen.com/english/advisories/2006/1342https://exchange.xforce.ibmcloud.com/vulnerabilities/25771
2006-04-13
Published