CVE-2006-5652

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.65%

Published

Nov 3, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBiPlanet Messaging Server - Messenger Express Expression() HTML Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.

Affected Products (1)

sun · iplanet_messaging_server_messenger_expressvulnerable

References (10)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050460.html

http://securityreason.com/securityalert/1806

http://www.securityfocus.com/archive/1/450184/100/0/threaded

http://www.securityfocus.com/bid/20838

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/29929

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050460.html

http://securityreason.com/securityalert/1806

http://www.securityfocus.com/archive/1/450184/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs