Lucene search
HistoryFeb 24, 2007 - 12:28 a.m.
CVE-2006-7050
cve-2006-7050
cross-site scripting
xss
wikkawiki
wikka wiki
nvd
security vulnerability
6.2 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.6%
Cross-site scripting (XSS) vulnerability in WikkaWiki (Wikka Wiki) before 1.1.6.2 allows remote attackers to inject arbitrary javascript via (1) events in forced links (url parameter) that are not properly handled in formatters/wakka.php, and possibly (2) other vectors in wikka.php.
Affected configurations
Node
wikkawikiwikkawikiRange≤1.1.6.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| wikkawiki:wikkawiki | wikkawiki | le | 1.1.6.1 |
6.2 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.017 Low
EPSS
Percentile
87.6%
Related for CVE-2006-7050