CVE-2006-1361

CVE-2006-1361

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://secunia.com/advisories/19290 https://exchange.xforce.ibmcloud.com/vulnerabilities/25410 http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log http://www.securityfocus.com/bid/17189 http://www.vupen.com/english/advisories/2006/1035