Yacy Security Vulnerabilities

CVE-2004-2651

Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html.

CVE-2008-4731

Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.