CVE-2006-1854 - Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field

Back Back to CVE browser

LOW

Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field

Published Apr 19, 2006

2.6

LOW

CVSS 2.0

EPSS 0.86%

Description

Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML during a login action via the (1) Account Name and (2) Username field. NOTE: the vendor has disputed this vulnerability, saying that "it does not exist currently in the Bluepay 2.0 product," and older versions might not have been affected either. As of 20060512, CVE has not formally investigated this dispute

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

http://pridels0.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html
x_refsource_MISC

Link	Providers	Tags
http://pridels0.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 19, 2006

Updated Aug 7, 2024

Reserved Apr 19, 2006

Link CVE-2006-1854

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1854

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-1854