CVE-2006-0194

FOG Creek Software Fogbugz < 4.029 - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page.

Exploits (1)

exploitdb WRITEUP VERIFIED
by M.Neset KABAKLI · textwebappsasp
https://www.exploit-db.com/exploits/27071

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/22370
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0174
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/421729/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24103
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18443
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16216

Scores

EPSS 0.0086
EPSS Percentile 75.2%

Details

Status published
Products (1)
fog_creek_software/fogbugz < 4.029
Published Jan 13, 2006
Tracked Since Feb 18, 2026