medium4.3Public exploit code
CVE-2006-4295
Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the emai…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting2006-08-10 · remote · windows · Verified
Impact
Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Panda | Panda Activescan | Version 5.53.00 |
References
- NVD record
- CVE.org record
- http://lostmon.blogspot.com/2006/08/panda-activescan-xss-vulnerability.html
- http://securitytracker.com/id?1016696
- http://www.osvdb.org/29147
- http://www.securityfocus.com/bid/19471
- http://lostmon.blogspot.com/2006/08/panda-activescan-xss-vulnerability.html
- http://securitytracker.com/id?1016696
- http://www.osvdb.org/29147
- http://www.securityfocus.com/bid/19471