Description
Cross-site scripting (XSS) vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
References
- 20850 third-party-advisory
- 18421 vdb-entry
- 20648 third-party-advisory
- 20060613 TikiWiki Sql injection & XSS Vulnerabilities mailing-list
- 1102 third-party-advisory
- tikiwiki-script-errors-xss(27145) vdb-entry
- ADV-2006-2349 vdb-entry
- http://sourceforge.net/project/shownotes.php?group_id=64258&release_id=423840
- GLSA-200606-29 vendor-advisory