CVE-2007-1418

The CVE-2007-1418 entry describes a cross-site scripting (XSS) vulnerability in MindTouch OpenGarden DekiWiki (skins/ace/popup-notopic.php) that allows injection of arbitrary script/HTML via the message parameter. The issue affects the application before Gooseberry++, with a base CVSS v2.0 score ...

CVE-2008-2848

CVE-2008-2848 describes a Cross-site scripting (XSS) vulnerability in the search functionality of MindTouch DekiWiki prior to version 8.05.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product: MindTouch DekiWiki (versions before 8.0...