6.8

CVE-2006-7050

Cross-site scripting (XSS) vulnerability in WikkaWiki (Wikka Wiki) before 1.1.6.2 allows remote attackers to inject arbitrary javascript via (1) events in forced links (url parameter) that are not properly handled in formatters/wakka.php, and possibly (2) other vectors in wikka.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wikkawiki ≫ Wikkawiki Version <= 1.1.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.4% 0.69
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/20628
Patch
http://wikkawiki.org/WikkaReleaseNotes
http://www.vupen.com/english/advisories/2006/2381
http://wush.net/trac/wikka/changeset/47
http://wush.net/trac/wikka/ticket/142
http://www.securityfocus.com/bid/18481
https://exchange.xforce.ibmcloud.com/vulnerabilities/27227