CVE-2006-2925
Last modified
CVE-2006-2925 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality.. EPSS estimates a 1.27% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ingate | Ingate Firewall | <= 4.3.4 |
| Ingate | Ingate Firewall | 4.3.1 |
| Ingate | Siparator | <= 4.3.4 |
| Ingate | Siparator | 4.3.1 |
References
- http://secunia.com/advisories/20479Patch, Vendor Advisory
- http://secunia.com/advisories/20479Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2925?
How severe is CVE-2006-2925?
How do I fix CVE-2006-2925?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-2919Unspecified vulnerability in Microsoft NetMeeting 3.01 allow…
- CVE-2006-2920Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow …
- CVE-2006-2921PHP remote file inclusion vulnerability in cmpro_header.inc.…
- CVE-2006-2922Multiple PHP remote file inclusion vulnerabilities in Miraks…
- CVE-2006-2923The iax_net_read function in the iaxclient open source libra…
- CVE-2006-2924Ingate Firewall in the SIP module before 4.4.1 and SIParator…
- CVE-2006-2926Stack-based buffer overflow in the WWW Proxy Server of Qbik …
- CVE-2006-2927Multiple cross-site scripting (XSS) vulnerabilities in post.…
- CVE-2006-2928Multiple PHP remote file inclusion vulnerabilities in CMS-Ba…
- CVE-2006-2929PHP remote file inclusion vulnerability in contrib/forms/eva…
- CVE-2006-2930Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 …
- CVE-2006-2931CMS Mundo before 1.0 build 008 does not properly verify uplo…
Are you affected by CVE-2006-2925?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST