Published: 13/04/2006 Updated: 18/10/2018

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

VMScore: 270

Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote malicious users to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe document server 6.0

source: wwwsecurityfocuscom/bid/17500/info Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to: - perform cross-site scripting attacks - gain access to potentially sensitive information - bypass security restrictions to gai ...

source: wwwsecurityfocuscom/bid/17500/info Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to: - perform cross-site scripting attacks - gain access to potentially sensitive information - bypass security restrictions to g ...

NVD-CWE-Other http://secunia.com/secunia_research/2005-68/advisory/http://www.adobe.com/support/techdocs/322699.html http://secunia.com/advisories/15924 http://www.securityfocus.com/bid/17500 http://www.osvdb.org/24590 http://www.osvdb.org/24589 http://www.vupen.com/english/advisories/2006/1342 https://exchange.xforce.ibmcloud.com/vulnerabilities/25771 http://www.securityfocus.com/archive/1/430869/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/27636/

CVE-2006-1786

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect