← back
CVE-2013-5586

CVE-2013-5586

EPSS 2.7%
Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2013-09/0048.htmlhttp://docs.wikkawiki.org/WhatsNew134http://osvdb.org/97183http://packetstormsecurity.com/files/123196http://seclists.org/bugtraq/2013/Sep/47http://secunia.com/advisories/54790https://exchange.xforce.ibmcloud.com/vulnerabilities/87013https://wush.net/trac/wikka/changeset/1896https://wush.net/trac/wikka/changeset/1900https://wush.net/trac/wikka/ticket/1152https://wush.net/trac/wikka/ticket/1153https://www.htbridge.com/advisory/HTB23170