CVE-2008-0809

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

DEBIAN-CVE-2008-0809

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

CVE-2008-0809

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

Cross site scripting

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

CVE-2008-0809

Cross-site scripting XSS vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents...

CVE-2008-0809

The CVE-2008-0809 entry describes a Cross-Site Scripting (XSS) vulnerability in ikiwiki’s htmlscrubber prior to version 1.1.46. The flaw allows remote attackers to inject arbitrary script or HTML via the title contents, enabling script execution in a victim’s browser when viewing affected pages. ...

ikiwiki -- javascript insertion via uris

The ikiwiki development team reports: The htmlscrubber did not block javascript in uris. This was fixed by adding a whitelist of valid uri types, which does not include javascript. Some urls specifyable by the meta plugin could also theoretically have been used to inject javascript; this was also...