6.8

CVE-2006-7050

EPSS 1.33%
Veröffentlicht 24.02.2007 00:28:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cross-site scripting (XSS) vulnerability in WikkaWiki (Wikka Wiki) before 1.1.6.2 allows remote attackers to inject arbitrary javascript via (1) events in forced links (url parameter) that are not properly handled in formatters/wakka.php, and possibly (2) other vectors in wikka.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wikkawiki ≫ Wikkawiki Version <= 1.1.6.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.33%	0.794

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/20628

Patch

http://wikkawiki.org/WikkaReleaseNotes

http://www.vupen.com/english/advisories/2006/2381

http://wush.net/trac/wikka/changeset/47

http://wush.net/trac/wikka/ticket/142

http://www.securityfocus.com/bid/18481

https://exchange.xforce.ibmcloud.com/vulnerabilities/27227

https://nvd.nist.gov/vuln/detail/CVE-2006-7050

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-7050

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-7050

EUVD