CVE-2008-6097 Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to index.php/Special/Main/keywordSe...
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to index.php/Special/Main/keywordSearch, (2) revNum parameter to index.php/Edit/Main/Home, (3) to parameter to index.php/Special/Main/WhatLinksHere, (4) user parameter to index.php/Special/Main/UserEdits, and (5) the PATH_INFO to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wikyblog | <= 1.7 | No fix listed |
| wikyblog | = 1.2.1 | No fix listed |
| wikyblog | = 1.2.2 | No fix listed |
| wikyblog | = 1.2.3 | No fix listed |
| wikyblog | = 1.3.2 | No fix listed |
| wikyblog | = 1.4 | No fix listed |
| wikyblog | = 1.4.1 | No fix listed |
| wikyblog | = 1.4.2 | No fix listed |
| wikyblog | = 1.4.3 | No fix listed |
| wikyblog | = 1.4.4 | No fix listed |
| wikyblog | = 1.4.5 | No fix listed |
| wikyblog | = 1.4.6 | No fix listed |
| wikyblog | = 1.4.7 | No fix listed |
| wikyblog | = 1.4.8 | No fix listed |
| wikyblog | = 1.4.9 | No fix listed |
| wikyblog | = 1.4.10 | No fix listed |
| wikyblog | = 1.4.11 | No fix listed |
| wikyblog | = 1.4.12 | No fix listed |
| wikyblog | = 1.4.13 | No fix listed |
| wikyblog | = 1.4.14 | No fix listed |
| wikyblog | = 1.4.15 | No fix listed |
| wikyblog | = 1.5 | No fix listed |
| wikyblog | = 1.5.0.2 | No fix listed |
| wikyblog | = 1.5.0.3 | No fix listed |
| wikyblog | = 1.5.1 | No fix listed |
Show 33 more
| Product | Affected versions | Fixed in |
|---|---|---|
| wikyblog | = 1.5.2 | No fix listed |
| wikyblog | = 1.5.3 | No fix listed |
| wikyblog | = 1.5.4 | No fix listed |
| wikyblog | = 1.5.5 | No fix listed |
| wikyblog | = 1.5.6 | No fix listed |
| wikyblog | = 1.5.7 | No fix listed |
| wikyblog | = 1.5.7.2 | No fix listed |
| wikyblog | = 1.5.7.3 | No fix listed |
| wikyblog | = 1.5.7.4 | No fix listed |
| wikyblog | = 1.6 | No fix listed |
| wikyblog | = 1.6.1 | No fix listed |
| wikyblog | = 1.6.1.1 | No fix listed |
| wikyblog | = 1.6.1.2 | No fix listed |
| wikyblog | = 1.6.1.3 | No fix listed |
| wikyblog | = 1.6.1.4 | No fix listed |
| wikyblog | = 1.6.1.5 | No fix listed |
| wikyblog | = 1.6.1.6 | No fix listed |
| wikyblog | = 1.6.1.7 | No fix listed |
| wikyblog | = 1.6b1 | No fix listed |
| wikyblog | = 1.6b2 | No fix listed |
| wikyblog | = 1.6b3 | No fix listed |
| wikyblog | = 1.7-rc1 | No fix listed |
| wikyblog | = 1.7-rc2 | No fix listed |
| wikyblog | = 1.7-rc3 | No fix listed |
| wikyblog | = 1.7.0.1 | No fix listed |
| wikyblog | = 1.7.1-rc1 | No fix listed |
| wikyblog | = 1.7.1-rc2 | No fix listed |
| wikyblog | = 1.7.1.1 | No fix listed |
| wikyblog | = 1.7.1b1 | No fix listed |
| wikyblog | = 1.7.1b2 | No fix listed |
| wikyblog | = 1.7b1 | No fix listed |
| wikyblog | = 1.7b2 | No fix listed |
| wikyblog | = 1.7b3 | No fix listed |
References
- 48790 vdb-entry
- 32087 third-party-advisory vendor-advisory
- sourceforge.net
- www.digitrustgroup.com
- 31525 exploit vdb-entry
- wikyblog-index-xss(45603) vdb-entry