CVE-2006-5035: Multiple cross-site scripting (XSS) vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote...

Security readout for executives and security teams

This older CVE describes cross-site scripting in Paul Smith Computer Services vCAP 1.7.0. A remote attacker could cause script or HTML to be injected through a registration message parameter or a nonexistent-file URL. The record notes unknown provenance and third-party sourcing, so treat exposure as uncertain until verified in your environment. Exposure is likely limited to organizations still running legacy vCAP 1.7.0, especially if its registration or error-handling pages are internet-accessible. The source bundle does not identify other versions, products, or deployment patterns. Prioritize as an exposure-discovery item, not a confirmed emergency. If vCAP 1.7.0 is internet-facing or used with authenticated sessions, reduce exposure quickly because XSS can support account abuse and phishing within trusted workflows. Mitigation focus: Inventory whether Paul Smith Computer Services vCAP 1.7.0 is still deployed.; Check vendor or archived advisory guidance for supported upgrades or workarounds.; If still deployed, restrict untrusted access to affected registration and error pages..

Prepared

Jun 29, 2026, 10:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.