CVE-2006-3289

CVE Database · CVE-2006-3289

CVE-2006-3289

· N/AModified

CVSS v3.1

N/A

EPSS

1.99%

Published

Jun 28, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL".

Affected Products (1)

cisco · wireless_control_systemvulnerable

References (14)

http://secunia.com/advisories/20870

http://securitytracker.com/id?1016398

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Patch

http://www.osvdb.org/26880

http://www.securityfocus.com/bid/18701

http://www.vupen.com/english/advisories/2006/2583

https://exchange.xforce.ibmcloud.com/vulnerabilities/27441

http://secunia.com/advisories/20870

http://securitytracker.com/id?1016398

http://www.cisco.com/warp/public/707/cisco-sa-20060628-wcs.shtml

Patch

http://www.osvdb.org/26880

KEV Catalog EPSS Scores Vendors All CVEs