CyberSec.Space Logo
Back to CVE Browser

CVE-2006-1960

MEDIUM
5.8
CVSS Severity Score
EPSS Score0.0540%
EPSS Percentile37.81th
PublishedApr 21, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.

Affected Platforms (CPE)

📦
Cisco

Wireless Lan Solution Engine

= 2.0
📦
Cisco

Wireless Lan Solution Engine

= 2.0
📦
Cisco

Wireless Lan Solution Engine

= 2.1
📦
Cisco

Wireless Lan Solution Engine

= 2.1
📦
Cisco

Wireless Lan Solution Engine

= 2.2
📦
Cisco

Wireless Lan Solution Engine

= 2.2
📦
Cisco

Wireless Lan Solution Engine

= 2.3
📦
Cisco

Wireless Lan Solution Engine

= 2.3
📦
Cisco

Wireless Lan Solution Engine

= 2.4
📦
Cisco

Wireless Lan Solution Engine

= 2.4
📦
Cisco

Wireless Lan Solution Engine

= 2.5
📦
Cisco

Wireless Lan Solution Engine

= 2.5
📦
Cisco

Wireless Lan Solution Engine

= 2.6
📦
Cisco

Wireless Lan Solution Engine

= 2.6
📦
Cisco

Wireless Lan Solution Engine

= 2.7
📦
Cisco

Wireless Lan Solution Engine

= 2.7
📦
Cisco

Wireless Lan Solution Engine

= 2.8
📦
Cisco

Wireless Lan Solution Engine

= 2.8
📦
Cisco

Wireless Lan Solution Engine

= 2.9
📦
Cisco

Wireless Lan Solution Engine

= 2.9
📦
Cisco

Wireless Lan Solution Engine

= 2.10
📦
Cisco

Wireless Lan Solution Engine

= 2.10
📦
Cisco

Wireless Lan Solution Engine

= 2.11
📦
Cisco

Wireless Lan Solution Engine

= 2.11
📦
Cisco

Wireless Lan Solution Engine

= 2.12
📦
Cisco

Wireless Lan Solution Engine

= 2.12
📦
Cisco

Wireless Lan Solution Engine

= 2.13
📦
Cisco

Wireless Lan Solution Engine

= 2.13

References & Advisories

🔗 http://secunia.com/advisories/19736
🔗 http://securitytracker.com/id?1015965
🔗 http://www.assurance.com.au/advisories/200604-cisco.txt
🔗 http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml
🔗 http://www.osvdb.org/24812
🔗 http://www.securityfocus.com/archive/1/431367/30/5490/threaded
🔗 http://www.securityfocus.com/archive/1/431371/30/5490/threaded
🔗 http://www.securityfocus.com/bid/17604

Related Vulnerabilities

CVE-2004-039110.0

Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded use...

CVE-2007-538210.0

The conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and earlier to Cisco Wireless Contro...

CVE-2006-19617.5

Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registra...

CVE-2007-14673.5

Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control S...