Unscored CVE-2006-2840 EUVD-2006-2837GHSA-772j-g7pw-69xq

Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inje…

Published Jun 6, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

References

http://www.pmwiki.org/wiki/PmWiki/ChangeLog
ADV-2006-2084 vdb-entry
20386 third-party-advisory
pmwiki-uploads-xss(26827) vdb-entry