CVE-2006-1196

Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) from and (2) help parameters to (a) index.php; (3) action, (4) page, (5) debug, (6) help, (7) username, or (8) password parameters to (b) login.php; the (7) help parameter to (c) pageindex.php; or (8) help parameter to (d) recentchanges.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

2.51% chance of exploitation in the next 30 days, 84th percentile

Published

2006-03-13

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://kiki91.altervista.org/exploit/qwikiwiki_1.0.5_xss.txt

ExploitDB entries (4)

• https://www.exploit-db.com/exploits/27412
• https://www.exploit-db.com/exploits/27411
• https://www.exploit-db.com/exploits/27410
• https://www.exploit-db.com/exploits/27409

References

• CVE Record
• NVD entry

Related

• CVE-2006-1194
• CVE-2006-1199
• CVE-2006-1193
• CVE-2006-1202
• CVE-2006-1192
• CVE-2006-1205