PT-2004-3514 · Wackowiki · Wackowiki

Publicado 2004-12-31 · Atualizado 2017-07-20 · CVE-2004-2624

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WackoWiki version 3.5

Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the phrase parameter in the "TextSearch" functionality.

Recommendations For WackoWiki version 3.5, consider restricting access to the "TextSearch" function until a fix is available, and avoid using the phrase parameter in this context to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2624

Produtos afetados

Wackowiki

Referências · 6

• http://secunia.com/advisories/12209 · Aviso do Fabricante
• http://wackowiki.com/WackoDownload/VersionHistory?v=yrv · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2624 · Nota de Segurança
• http://osvdb.org/8295 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16878 · Nota
• http://securityfocus.com/bid/10860 · Correção