CVE-2006-3289

Published: Jun 28, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL".

Affected (1)

Products: Cisco: Wireless Control System

1 product

Wireless Control System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Wireless Control System	Up to 3.2\(51\)

References (14)

http://secunia.com/advisories/20870

Source: cve@mitre.org

http://securitytracker.com/id?1016398

Source: cve@mitre.org

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Source: cve@mitre.org

Patch

http://www.osvdb.org/26880

Source: cve@mitre.org

http://www.securityfocus.com/bid/18701

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2583

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27441

Source: cve@mitre.org

http://secunia.com/advisories/20870

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016398

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.osvdb.org/26880

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18701

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2583

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27441

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.