Gentoo Security Advisory GLSA 200609-16 (tikiwiki)

The remote host is missing updates announced in advisory GLSA 200609-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2006-4299

Cross-site scripting XSS vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4299

Cross-site scripting XSS vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4299

Concrete details found: CVE-2006-4299 affects TikiWiki 1.9.4, with a cross-site scripting (XSS) flaw in tiki-searchindex.php via the highlight parameter. Exploitation would allow injected script/HTML in the victim’s browser. Gentoo GLSA advises upgrading to tikiwiki-1.9.5 or newer to remedy. Othe...