Skip to content
Fencer Vulns
low 2.6

CVE-2006-3217 json

JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the usernam…

published 2006-06-24 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3214

cvss
2.6
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.5%
EPSS 1.5% chance of exploitation in 30 days, percentile 75%
public exploits
0
none known

Summary

JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field.

Exploit prediction

1.54% chance of exploitation in the next 30 days, higher than 75% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • securityfocus.com http://www.securityfocus.com/bid/18576 referenced PoC, tagged "exploit" by a source, unverified
  • secunia.com http://secunia.com/advisories/20759 referenced PoC, tagged "exploit" by a source, unverified
  • srlabs.net http://www.srlabs.net/bulten/JaguarEdit_2.htm referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.