20080407 Swiki 1.5 Multiple Cross-Site Scripting Vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/490561/100/0/threaded CVE-2008-6200
Swiki 1.5 - HTML Injection / Cross-Site Scripting
Record summary
CVE-2008-6200 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the query string and (2) a new wiki entry.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSwiki 1.5 - HTML Injection / Cross-Site ScriptingExploitDB exploitby Brad AntoniewiczNot analyzed1 file
References
528680vdb entry
http://www.securityfocus.com/bid/28680 swiki-query-xss(48838)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/48838 swiki-entry-xss(48839)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/48839 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-6200