CVE-2006-5843

Speedywiki - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via the showRevisions parameter.

References (7)

[Mailing List] http://marc.info/?l=bugtraq&m=116302805802656&w=2

[Broken Link, URL Repurposed] http://s-a-p.ca/index.php?page=OurAdvisories&id=9

[Vendor Advisory] http://secunia.com/advisories/22788

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1017201

[Exploit, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/20976

[Not Applicable] http://www.vupen.com/english/advisories/2006/4421

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/30132

Scores

EPSS 0.0166

EPSS Percentile 81.9%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

speedywiki/speedywiki

Timeline

Published Nov 10, 2006

Tracked Since Feb 18, 2026