Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2006-2784

The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by…

Medium5.1EPSS 1.8%
Published
Updated
Reserved
Assigned by
mitre

Description

The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested javascript: URLs. NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site.

Scores

CVSS scores of CVE-2006-2784, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0Medium5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS (exploitation in 30 days)
1.8% · top 22% of all CVEs (6 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.1.

Weakness

Affected products

  • n/a

    • affected n/a

References (41)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2006-2784 badge
[![CVE-2006-2784](https://trackcve.app/badge/CVE-2006-2784.svg)](https://trackcve.app/cve/CVE-2006-2784)

Record last updated .