CVE-2005-2803

Published: Sep 6, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Hiki 0.8.1 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via a page name in a Login link, a different vulnerability than CVE-2005-2336.

Affected (3)

Products: Hiki: Hiki

Hiki

1 product

Hiki

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Hiki Hiki	Version 0.8.0
Hiki Hiki	Version 0.8.1
Hiki Hiki	Version 0.8.2

References (8)

http://hikiwiki.org/en/advisory20050804.html

Source: cve@mitre.org

PatchVendor Advisory

http://jvn.jp/jp/JVN%2338138980

Source: cve@mitre.org

http://secunia.com/advisories/17075

Source: cve@mitre.org

http://www.securityfocus.com/bid/15021

Source: cve@mitre.org

http://hikiwiki.org/en/advisory20050804.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://jvn.jp/jp/JVN%2338138980

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17075

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15021

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.