CVE-2006-2850

CVE-2006-2850

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2006/06/labwiki-xss-vuln.html http://secunia.com/advisories/20417 https://exchange.xforce.ibmcloud.com/vulnerabilities/26902 http://www.osvdb.org/25963 http://www.securityfocus.com/bid/18267 http://www.vupen.com/english/advisories/2006/2123