medium4.3
CVE-2013-6047
Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitr…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ikiwiki Hosting Project | Ikiwiki Hosting | through 0.20130926 Versions 0.20110401, 0.20110420, 0.20110424, 0.20110515, 0.20110608 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/99012
- http://packages.qa.debian.org/i/ikiwiki-hosting/news/20131025T224825Z.html
- http://seclists.org/oss-sec/2013/q4/180
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88334
- http://osvdb.org/99012
- http://packages.qa.debian.org/i/ikiwiki-hosting/news/20131025T224825Z.html
- http://seclists.org/oss-sec/2013/q4/180
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88334