CVE-2006-2850

CVE-2006-2850

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://pridels0.blogspot.com/2006/06/labwiki-xss-vuln.html http://secunia.com/advisories/20417 https://exchange.xforce.ibmcloud.com/vulnerabilities/26902 http://www.osvdb.org/25963 http://www.securityfocus.com/bid/18267 http://www.vupen.com/english/advisories/2006/2123