CVE-2007-1405

Published: Mar 10, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected (4)

Products: Edgewall Software: Trac

Edgewall Software

1 product

Trac

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Edgewall Software Trac	Version 0.10.1
Edgewall Software Trac	Version 0.10.2
Edgewall Software Trac	Version 0.10.3
Edgewall Software Trac	Version 0.10

References (10)

http://secunia.com/advisories/24470

Source: cve@mitre.org

Vendor Advisory

http://trac.edgewall.org/wiki/ChangeLog

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/22888

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0900

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32897

Source: cve@mitre.org

http://secunia.com/advisories/24470