PT-2006-5333 · Saba · Learncenter

Published 2006-09-05 · Updated 2017-07-20 · CVE-2006-4540

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LearnCenter (affected versions not specified)

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the id parameter in the "learncenter.asp" page.

Recommendations For all affected versions, avoid using the id parameter in the vulnerable "learncenter.asp" page until a fix is available. As a temporary workaround, consider restricting access to the "learncenter.asp" page to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-4540

Affected Products

Learncenter

References · 9

• 🔥 https://exploit-db.com/exploits/28466 · Exploit
• 🔥 http://securityfocus.com/bid/19781 · Exploit
• 🔥 http://securityfocus.com/archive/1/444842 · Exploit
• 🔥 http://osvdb.org/28306 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4540 · Security Note
• http://secunia.com/advisories/21716 · Vendor Advisory
• http://attrition.org/pipermail/vim/2006-October/001093.html · Note
• http://vupen.com/english/advisories/2006/3432 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28694 · Note