CVE-2006-3841 json
Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3…
published 2006-07-25 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3835
- cvss
- 2.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.4%
- EPSS 1.4% chance of exploitation in 30 days, percentile 72%
- public exploits
- 0
- none known
Summary
Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL.
Patch / fix
Exploit prediction
1.37% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:N/I:P/A:N |
References
-
moritz-naumann.com
/adv/0012/webscarabxss/0012.txt
patch
-
secunia.com
/advisories/21114
third-party-advisory, patch, vendor-advisory
-
securityreason.com
/securityalert/1276
third-party-advisory
-
securityfocus.com
/bid/19063
vdb-entry
-
lists.grok.org.uk
/pipermail/full-disclosure/2006-July/047995.html
mailing-list
-
securityfocus.com
/archive/1/440441/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/27797
vdb-entry
-
vupen.com
/english/advisories/2006/2878
vdb-entry
Sources
- CVE List CVE-2006-3841
- NVD CVE-2006-3841
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.