CVE-2006-1361

CVE-2006-1361

EPSS 1.2%

Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://secunia.com/advisories/19290 https://exchange.xforce.ibmcloud.com/vulnerabilities/25410 http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log http://www.securityfocus.com/bid/17189 http://www.vupen.com/english/advisories/2006/1035