CVE-2006-1361

CVE-2006-1361

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/19290 https://exchange.xforce.ibmcloud.com/vulnerabilities/25410 http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log http://www.securityfocus.com/bid/17189 http://www.vupen.com/english/advisories/2006/1035