Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-3101

4 documents4 sources
Severity
4.3MEDIUM
EPSS
25.6%
top 3.76%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Cisco Secure Access Control Server
Timeline
PublishedJun 21
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: securitytracker.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p9v7-rhjg-9jx7: Cross-site scripting (XSS) vulnerability in LogonProxy↗2022-05-01
▶
CVEList
CVE-2006-3101: Cross-site scripting (XSS) vulnerability in LogonProxy↗2006-06-21
▶

💥Exploits & PoCs

1
Exploit-DB
Cisco Secure ACS 2.3 - 'LoginProxy.cgi' Cross-Site Scripting↗2006-06-15
▶