CVE-2008-6130 Cross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) action and (2) page parameters.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) action and (2) page parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilowiki | <= 1.0.1 | No fix listed |
| mozilowiki | = 0.7 | No fix listed |
| mozilowiki | = 0.8 | No fix listed |
| mozilowiki | = 0.9 | No fix listed |
| mozilowiki | = 0.10 | No fix listed |
| mozilowiki | = 1.0.0 | No fix listed |
References
- 20080930 [MajorSecurity Advisory #56]moziloWiki - Directory Traversal, XSS and SessionFixation Issues mailing-list
- 32024 third-party-advisory vendor-advisory
- wiki.mozilo.de
- www.majorsecurity.de
- 31493 vdb-entry
- mozilowiki-index-xss(45527) vdb-entry