NVD

Id
61168  
Name
CVE-2006-2473  
Description
** DISPUTED ** Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product. The vendor states "You cannot insert code in a wikipage or via URL parameters as they are all escaped before usage, so nothing can be compromised at other sites."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-05-19  
Modified Date
2009-08-20  
Seq
2006-2473  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316138 61168 CVE-2006-2473 920  View
316139 61168 CVE-2006-2473 http://www.openwiki.com/ow.asp?OpenWikiVulnerability  View
316140 61168 CVE-2006-2473 http://www.openwiki.com/ow.asp?XssVulnerability  View
316141 61168 CVE-2006-2473 20060517 OpenWiki<--v0.78 Cross-Site Scripting  View
316142 61168 CVE-2006-2473 20080912 Re: OpenWiki<--v0.78 Cross-Site Scripting  View
316143 61168 CVE-2006-2473 18013  View
316144 61168 CVE-2006-2473 openwiki-ow-xss(26517)  View

Related JVN