CVE-2006-1960
published 2006-04-21CVE-2006-1960: Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before…
PriorityP426medium5.8CVSS 2.0
AVNACMAuNCPIPAN
EXPLOIT
EPSS
5.35%
91.6th percentile
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
| cisco | wireless_lan_solution_engine | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in the WLSE Appliance
vendor_cisco·2006-04-19
CVE-2006-1960 CWE-79 Multiple Vulnerabilities in the WLSE Appliance
Multiple Vulnerabilities in the WLSE Appliance
There are two vulnerabilities that exist in the CiscoWorks Wireless LAN
Solution Engine (WLSE). The first is a cross site scripting (XSS) vulnerability
that may allow an attacker to gain administrative privileges on the system. The
second is a local privilege escalation vulnerability that can be used by an
attacker who already has authenticated access to the command line interface to
obtain access to the underlying operating system.
Cisco has made free software available to
address this vulnerability for affected customers.
This advisory is available at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060419-wlse
Cisco
Multiple Vulnerabilities in the WLSE Appliance
vendor_cisco
CVE-2006-1960 Multiple Vulnerabilities in the WLSE Appliance
CVE-2006-1960: Multiple Vulnerabilities in the WLSE Appliance
There are two vulnerabilities that exist in the CiscoWorks Wireless LAN Solution Engine (WLSE). The first is a cross site scripting (XSS) vulnerability that may allow an attacker to gain administrative privileges on the system. The second is a local privilege escalation vulnerability that can be used by an attacker who already has authenticated access to the command line interface to obtain access to the underlying operating system. Cisco has made free software available to address this vulnerability for affected customers. This advisory is available at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20060419-wlse
CWE: CWE-79, CWE-79
Bug IDs: CSCsc01095, CSCsd21502
GHSA
GHSA-4pc4-8xfx-vr97: Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express
ghsa_unreviewed·2022-05-01
CVE-2006-1960 [MEDIUM] GHSA-4pc4-8xfx-vr97: Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/19736http://securitytracker.com/id?1015965http://www.assurance.com.au/advisories/200604-cisco.txthttp://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtmlhttp://www.osvdb.org/24812http://www.securityfocus.com/archive/1/431367/30/5490/threadedhttp://www.securityfocus.com/archive/1/431371/30/5490/threadedhttp://www.securityfocus.com/bid/17604http://www.vupen.com/english/advisories/2006/1434https://exchange.xforce.ibmcloud.com/vulnerabilities/25883http://secunia.com/advisories/19736http://securitytracker.com/id?1015965http://www.assurance.com.au/advisories/200604-cisco.txthttp://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtmlhttp://www.osvdb.org/24812http://www.securityfocus.com/archive/1/431367/30/5490/threadedhttp://www.securityfocus.com/archive/1/431371/30/5490/threadedhttp://www.securityfocus.com/bid/17604http://www.vupen.com/english/advisories/2006/1434https://exchange.xforce.ibmcloud.com/vulnerabilities/25883
2006-04-21
Published