CVE-2006-0699

QWikiWiki 1.5 - Cross-Site Scripting via Search Query Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0699. PoCs published by Citynova.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in QwikiWiki 1.5, where user-supplied input is not properly sanitized. It includes a proof-of-concept URL demonstrating the vulnerability but lacks executable exploit code.

Description

Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows remote attackers to inject arbitrary web script or HTML via the query parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Citynova · textwebappsphp
https://www.exploit-db.com/exploits/27213

The provided text describes a cross-site scripting (XSS) vulnerability in QwikiWiki 1.5, where user-supplied input is not properly sanitized. It includes a proof-of-concept URL demonstrating the vulnerability but lacks executable exploit code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: QwikiWiki 1.5
No auth needed
Prerequisites: Access to the vulnerable QwikiWiki instance
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16638
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24669
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18814
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0562

Scores

EPSS 0.0171
EPSS Percentile 75.0%

Details

Status published
Products (8)
david_barrett/qwikiwiki 1.0
david_barrett/qwikiwiki 1.2
david_barrett/qwikiwiki 1.3
david_barrett/qwikiwiki 1.4
david_barrett/qwikiwiki 1.4.1
david_barrett/qwikiwiki 1.4.2
david_barrett/qwikiwiki 1.5
david_barrett/qwikiwiki 1.5.1
Published Feb 15, 2006
Tracked Since Feb 18, 2026