CVE-2006-1361 - Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml

Published Mar 23, 2006

4.3

MEDIUM

CVSS 2.0

EPSS 1.18%

Description

Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://secunia.com/advisories/19290
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log
x_refsource_CONFIRM
http://www.securityfocus.com/bid/17189
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1035
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1365
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25410
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/19290		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log		x_refsource_CONFIRM
http://www.securityfocus.com/bid/17189		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1035		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1365		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25410		vdb-entryx_refsource_XF