Unscored CVE-2006-3399 EUVD-2006-3395GHSA-xxc5-ccgw-mxwv

Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascri…

Published Jul 6, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message, a variant of CVE-2004-1632.

References

20909 third-party-advisory
moniwiki-wiki-url-xss(27491) vdb-entry
26958 vdb-entry
20060630 [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability mailing-list
20060702 Re: [Full Disclosure] [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability mailing-list
ADV-2006-2631 vdb-entry
1196 third-party-advisory