CVE-2006-1785

Adobe Document Server for Reader Extensions 6.0 is affected. Remote authenticated users can inject arbitrary web script via a leading ftp/http URI in the ReaderURL variable in the Update Download Site section of ads-readerext, per CVE-2006-1785. The description notes uncertainty about vendor advi...