PT-2009-1675 · Swiki · Swiki

Publicado 2009-02-20 · Atualizado 2018-10-11 · CVE-2008-6200

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Swiki version 1.5

Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting (XSS) attacks. This is possible via the query string and a new wiki entry.

Recommendations For Swiki version 1.5, consider validating and sanitizing user input to prevent the injection of malicious scripts or HTML, especially in the query string and when creating new wiki entries. As a temporary workaround, restrict access to sensitive areas of the wiki to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-6200

Produtos afetados

Swiki

Referências · 7

• 🔥 https://exploit-db.com/exploits/31628 · Exploit
• 🔥 http://securityfocus.com/bid/28680 · Exploit
• http://securityfocus.com/archive/1/490561/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48838 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6200 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48839 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6200 · Nota