Published: 09/02/2009 Updated: 08/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog prior to 1.7.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) key parameter to index.php/Special/Main/keywordSearch, (2) revNum parameter to index.php/Edit/Main/Home, (3) to parameter to index.php/Special/Main/WhatLinksHere, (4) user parameter to index.php/Special/Main/UserEdits, and (5) the PATH_INFO to index.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wikyblog wikyblog 1.6.1.7
wikyblog wikyblog 1.6
wikyblog wikyblog 1.5.7.2
wikyblog wikyblog 1.5.7
wikyblog wikyblog 1.5.0.2
wikyblog wikyblog 1.5
wikyblog wikyblog 1.7
wikyblog wikyblog 1.6.1.4
wikyblog wikyblog 1.6.1.3
wikyblog wikyblog 1.6.1.2
wikyblog wikyblog 1.4.14
wikyblog wikyblog 1.4.13
wikyblog wikyblog 1.4.5
wikyblog wikyblog 1.4.4
wikyblog wikyblog 1.4.12
wikyblog wikyblog 1.5.7.4
wikyblog wikyblog 1.5.7.3
wikyblog wikyblog 1.5.1
wikyblog wikyblog 1.5.0.3
wikyblog wikyblog 1.7.1.1
wikyblog wikyblog 1.7.0.1
wikyblog wikyblog 1.6.1.6
wikyblog wikyblog 1.6.1.5
wikyblog wikyblog 1.6b1
wikyblog wikyblog 1.4.15
wikyblog wikyblog 1.4.7
wikyblog wikyblog 1.4.6
wikyblog wikyblog
wikyblog wikyblog 1.2.3
wikyblog wikyblog 1.3.2
wikyblog wikyblog 1.5.3
wikyblog wikyblog 1.5.2
wikyblog wikyblog 1.7.1b2
wikyblog wikyblog 1.7.1b1
wikyblog wikyblog 1.7b2
wikyblog wikyblog 1.7b1
wikyblog wikyblog 1.6b3
wikyblog wikyblog 1.6b2
wikyblog wikyblog 1.4.9
wikyblog wikyblog 1.4.8
wikyblog wikyblog 1.4.1
wikyblog wikyblog 1.4
wikyblog wikyblog 1.2.1
wikyblog wikyblog 1.2.2
wikyblog wikyblog 1.5.6
wikyblog wikyblog 1.5.5
wikyblog wikyblog 1.5.4
wikyblog wikyblog 1.7.1
wikyblog wikyblog 1.7b3
wikyblog wikyblog 1.6.1.1
wikyblog wikyblog 1.6.1
wikyblog wikyblog 1.4.11
wikyblog wikyblog 1.4.10
wikyblog wikyblog 1.4.3
wikyblog wikyblog 1.4.2

source: wwwsecurityfocuscom/bid/31525/info WikyBlog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This may allow the atta ...

CWE-79 http://www.digitrustgroup.com/advisories/web-application-security-wikyblog.html http://secunia.com/advisories/32087 http://sourceforge.net/project/shownotes.php?group_id=148518&release_id=647444 http://www.securityfocus.com/bid/31525 http://osvdb.org/48790 https://exchange.xforce.ibmcloud.com/vulnerabilities/45603 https://nvd.nist.gov https://www.exploit-db.com/exploits/32450/

CVE-2008-6097

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect