CVE-2006-0194

Published: Jan 13, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page.

Affected (1)

Products: Fog Creek Software: Fogbugz

Fog Creek Software

1 product

Fogbugz

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fog Creek Software Fogbugz	version ≤ 4.029

References (14)

http://secunia.com/advisories/18443

Source: cve@mitre.org

http://www.fogcreek.com/FogBugz/KB/releaseNotes/WhatsNewInFogBugz4.0.33.html

Source: cve@mitre.org

http://www.osvdb.org/22370

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/421729/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16216

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/0174

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24103

Source: cve@mitre.org

http://secunia.com/advisories/18443