CVE Vulnerabilities

CVE-2006-1960

Published: Apr 21, 2006 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.

Affected Software

NameVendorStart VersionEnd Version
Wireless_lan_solution_engineCisco2.0 (including)2.0 (including)
Wireless_lan_solution_engineCisco2.1 (including)2.1 (including)
Wireless_lan_solution_engineCisco2.2 (including)2.2 (including)
Wireless_lan_solution_engineCisco2.3 (including)2.3 (including)
Wireless_lan_solution_engineCisco2.4 (including)2.4 (including)
Wireless_lan_solution_engineCisco2.5 (including)2.5 (including)
Wireless_lan_solution_engineCisco2.6 (including)2.6 (including)
Wireless_lan_solution_engineCisco2.7 (including)2.7 (including)
Wireless_lan_solution_engineCisco2.8 (including)2.8 (including)
Wireless_lan_solution_engineCisco2.9 (including)2.9 (including)
Wireless_lan_solution_engineCisco2.10 (including)2.10 (including)
Wireless_lan_solution_engineCisco2.11 (including)2.11 (including)
Wireless_lan_solution_engineCisco2.12 (including)2.12 (including)
Wireless_lan_solution_engineCisco2.13 (including)2.13 (including)

References