PT-2009-1675 · Swiki · Swiki

Published 2009-02-20 · Updated 2018-10-11 · CVE-2008-6200

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Swiki version 1.5

Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting (XSS) attacks. This is possible via the query string and a new wiki entry.

Recommendations For Swiki version 1.5, consider validating and sanitizing user input to prevent the injection of malicious scripts or HTML, especially in the query string and when creating new wiki entries. As a temporary workaround, restrict access to sensitive areas of the wiki to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-6200

Affected Products

Swiki

References · 7

• 🔥 https://exploit-db.com/exploits/31628 · Exploit
• 🔥 http://securityfocus.com/bid/28680 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6200 · Security Note
• http://securityfocus.com/archive/1/490561/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48838 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48839 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6200 · Note