CVE-2006-4660

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-09 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) allow remote attackers to process arbitrary web script or HTML in the Feeds interface context via the (1) title and (2) description elements within an item element in an RSS feed.

Affected products

Icq Inc Icq Toolbar: 1.3_for_internet_explorer

References

http://secunia.com/advisories/21809
http://securityreason.com/securityalert/1523
http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510
http://www.securityfocus.com/archive/1/445515/100/0/threaded
http://www.securityfocus.com/bid/19900
http://www.vupen.com/english/advisories/2006/3528
https://exchange.xforce.ibmcloud.com/vulnerabilities/28809
http://secunia.com/advisories/21809
http://securityreason.com/securityalert/1523
http://www.coresecurity.com/index.php5?module=ContentMod&action=item&id=1510
http://www.securityfocus.com/archive/1/445515/100/0/threaded
http://www.securityfocus.com/bid/19900

Get alerted when CVE-2006-4660 or the next vulnerability affects your stack