CVEvulnerability
CVE-2006-1393
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.
Affected configurations
• university of washington pubcookie 3.0.0
• university of washington pubcookie 3.1.0
• university of washington pubcookie 3.1.1
• university of washington pubcookie 3.2.0
• university of washington pubcookie 3.2.1
• university of washington pubcookie 3.2.1a
• university of washington pubcookie 3.3.0
References
- http://pubcookie.org/news/20060306-apps-secadv.html Patch, Vendor Advisory
- http://secunia.com/advisories/19348 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/314540 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/24103 www.osvdb.org
- http://www.securityfocus.com/bid/17221 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25426 exchange.xforce.ibmcloud.com
- http://pubcookie.org/news/20060306-apps-secadv.html Patch, Vendor Advisory
- http://secunia.com/advisories/19348 Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/314540 Patch, Third Party Advisory, US Government Resource
- http://www.osvdb.org/24103 www.osvdb.org
- http://www.securityfocus.com/bid/17221 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25426 exchange.xforce.ibmcloud.com