CVE-2006-5741
- EPSS 0.54%
- Veröffentlicht 06.11.2006 18:07:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via (1) the 404 error page of the Smart Sensor Edge Sensor; (2) the user name for a failed...
- EPSS 0.41%
- Veröffentlicht 06.11.2006 18:07:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
The AirMagnet Enterprise console and Remote Sensor console (Laptop) in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template va...
CVE-2006-5746
- EPSS 0.31%
- Veröffentlicht 06.11.2006 18:07:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack, possibly related to the use of self-s...