CVEvulnerability
CVE-2006-3289
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-06-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL".
Affected configurations
• cisco wireless control system (<= 3.2\(51\))
References
- http://secunia.com/advisories/20870 secunia.com
- http://securitytracker.com/id?1016398 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml Patch
- http://www.osvdb.org/26880 www.osvdb.org
- http://www.securityfocus.com/bid/18701 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2583 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27441 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20870 secunia.com
- http://securitytracker.com/id?1016398 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml Patch
- http://www.osvdb.org/26880 www.osvdb.org
- http://www.securityfocus.com/bid/18701 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2583 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27441 exchange.xforce.ibmcloud.com