CVE-2006-1361

Published: Mar 23, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.

Affected (1)

Products: Oswiki: Oswiki

Oswiki

1 product

Oswiki

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oswiki Oswiki	version ≤ 0.3

References (10)

http://secunia.com/advisories/19290

Source: cve@mitre.org

PatchVendor Advisory

http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log

Source: cve@mitre.org

http://www.securityfocus.com/bid/17189

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1035

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25410

Source: cve@mitre.org

http://secunia.com/advisories/19290