Unrated severityNVD Advisory· Published Apr 13, 2006· Updated Apr 16, 2026
CVE-2006-1786
CVE-2006-1786
Description
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses this issue.
Affected products
1- cpe:2.3:a:adobe:document_server:6.0:*:reader_extensions:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- secunia.com/advisories/15924nvdExploitVendor Advisory
- secunia.com/secunia_research/2005-68/advisory/nvdExploitVendor Advisory
- www.adobe.com/support/techdocs/322699.htmlnvdVendor Advisory
- www.osvdb.org/24589nvd
- www.osvdb.org/24590nvd
- www.securityfocus.com/archive/1/430869/100/0/threadednvd
- www.securityfocus.com/bid/17500nvd
- www.vupen.com/english/advisories/2006/1342nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25771nvd
News mentions
0No linked articles in our index yet.