PT-2005-3262 · Hiki · Hiki

Publicado 2005-09-06 · Atualizado 2008-11-11 · CVE-2005-2336

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hiki versions 0.8.0 through 0.8.2

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via "missing pages" where the page name is not properly escaped.

Recommendations For Hiki versions 0.8.0 through 0.8.2, consider updating to a version where this issue is fixed, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to "missing pages" to minimize the risk of exploitation.

Identificadores relacionados

CVE-2005-2336

Produtos afetados

Hiki

Referências · 9

• http://secunia.com/advisories/17075 · Nota
• http://securityfocus.com/bid/15021 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2336 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2336 · Aviso do Fabricante
• http://hikiwiki.org/en/advisory20050804.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2336 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN38138980/index.html · Nota
• https://osv.dev/vulnerability/CVE-2005-2336 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2336 · Nota