 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2007-6526 |
| Description: | Cross-site scripting (XSS) vulnerability in tiki-special_chars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the area_name parameter. |
| Test IDs: | None available |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2007-6526 BugTraq ID: 27004 http://www.securityfocus.com/bid/27004 Bugtraq: 20071224 Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability (Google Search) http://www.securityfocus.com/archive/1/485483/100/0/threaded http://security.gentoo.org/glsa/glsa-200801-10.xml http://www.h-labs.org/blog/2007/12/24/tikiwiki_1_9_8_3_tiki_special_chars_php_xss_vulnerability.html http://osvdb.org/41179 http://secunia.com/advisories/28225 http://secunia.com/advisories/28602 http://securityreason.com/securityalert/3483 |