CVE-2006-1769

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-04-13 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the mode parameter in msgReader$1 and (2) the end of the URI in viewDepartment$.

Affected products

Userland Manila: through 9.5; 9.4

References

http://secunia.com/advisories/19636
http://securityreason.com/securityalert/692
http://www.osvdb.org/24554
http://www.securityfocus.com/archive/1/430668/100/0/threaded
http://www.securityfocus.com/bid/17475
https://exchange.xforce.ibmcloud.com/vulnerabilities/25753
http://secunia.com/advisories/19636
http://securityreason.com/securityalert/692
http://www.osvdb.org/24554
http://www.securityfocus.com/archive/1/430668/100/0/threaded
http://www.securityfocus.com/bid/17475
https://exchange.xforce.ibmcloud.com/vulnerabilities/25753

Get alerted when CVE-2006-1769 or the next vulnerability affects your stack