CVE-2005-2803

Cross-site scripting XSS vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336...

DEBIAN-CVE-2005-2336

Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...

CVE-2005-2803

CVE-2005-2803 is an XSS vulnerability in Hiki 0.8.1–0.8.2 where the page name used in the Login link is not properly escaped. The issue enables remote attackers to inject arbitrary script/HTML. Other connected sources (JVN/JVNDB/OSV) reference a related Hiki XSS advisory and confirm the same gene...

CVE-2005-2336

The CVE-2005-2336 entries describe an XSS flaw in Hiki 0.8.0–0.8.2 where page names in missing pages aren’t properly escaped, allowing remote script/HTML injection. Connected sources (JVNDB-2005-000779/000780) outline impact: an attacker could craft content to steal a user’s session ID or, if the...

CVE-2005-2336

Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...

CVE-2005-2803

Cross-site scripting XSS vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336...

CVE-2005-2336

Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...

CVE-2005-2803

Cross-site scripting XSS vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336...

JVN#38138980 Hiki cross-site scripting vulnerability

Impact A remote attacker could create a content containing attacking code and take over a session by stealing the session ID of the user who logged into the system. If the user logged into the system as the administrator, the remote attacker could manipulate configurations. Solution Products...