EUVD-2007-1412

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in skins/ace/popup-notopic.php in MindTouch OpenGarden DekiWiki before Gooseberry++ allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2007-1418

The CVE-2007-1418 entry describes a cross-site scripting (XSS) vulnerability in MindTouch OpenGarden DekiWiki (skins/ace/popup-notopic.php) that allows injection of arbitrary script/HTML via the message parameter. The issue affects the application before Gooseberry++, with a base CVSS v2.0 score ...

CVE-2007-1418

Cross-site scripting XSS vulnerability in skins/ace/popup-notopic.php in MindTouch OpenGarden DekiWiki before Gooseberry++ allows remote attackers to inject arbitrary web script or HTML via the message parameter...