Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-1786. PoCs published by Tan Chew Keong.
AI-analyzed exploit summary The provided text describes multiple vulnerabilities in Adobe Document Server for Reader Extensions, including XSS, information disclosure, and security bypass. It references a specific URL pattern for exploitation but lacks actual exploit code.
Description
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses this issue.
Exploits (2)
The provided text describes multiple vulnerabilities in Adobe Document Server for Reader Extensions, including XSS, information disclosure, and security bypass. It references a specific URL pattern for exploitation but lacks actual exploit code.
The provided text describes multiple vulnerabilities in Adobe Document Server for Reader Extensions, including XSS, information disclosure, and security bypass. However, it lacks actual exploit code or a proof-of-concept, serving only as a vulnerability summary.