CVE-2010-5054

Published: Nov 23, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected (45)

Products: Jamwiki: Jamwiki

Jamwiki

1 product

Jamwiki

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Jamwiki Jamwiki	Up to 0.8.3
Jamwiki Jamwiki	Version 0.0.2
Jamwiki Jamwiki	Version 0.0.3
Jamwiki Jamwiki	Version 0.0.4
Jamwiki Jamwiki	Version 0.0.5
Jamwiki Jamwiki	Version 0.0.6
Jamwiki Jamwiki	Version 0.0.7
Jamwiki Jamwiki	Version 0.0.8
Jamwiki Jamwiki	Version 0.0.9
Jamwiki Jamwiki	Version 0.1.0
Jamwiki Jamwiki	Version 0.1.1
Jamwiki Jamwiki	Version 0.1.2
Jamwiki Jamwiki	Version 0.1.3
Jamwiki Jamwiki	Version 0.2.0
Jamwiki Jamwiki	Version 0.2.1
Jamwiki Jamwiki	Version 0.3.0
Jamwiki Jamwiki	Version 0.3.1
Jamwiki Jamwiki	Version 0.3.2
Jamwiki Jamwiki	Version 0.3.3
Jamwiki Jamwiki	Version 0.3.4
Jamwiki Jamwiki	Version 0.3.5
Jamwiki Jamwiki	Version 0.3.6
Jamwiki Jamwiki	Version 0.4.0
Jamwiki Jamwiki	Version 0.4.1
Jamwiki Jamwiki	Version 0.4.2
Jamwiki Jamwiki	Version 0.4.3
Jamwiki Jamwiki	Version 0.5.0
Jamwiki Jamwiki	Version 0.5.1
Jamwiki Jamwiki	Version 0.5.2
Jamwiki Jamwiki	Version 0.5.3
Jamwiki Jamwiki	Version 0.5.4
Jamwiki Jamwiki	Version 0.6.0
Jamwiki Jamwiki	Version 0.6.1
Jamwiki Jamwiki	Version 0.6.2
Jamwiki Jamwiki	Version 0.6.3
Jamwiki Jamwiki	Version 0.6.4
Jamwiki Jamwiki	Version 0.6.5
Jamwiki Jamwiki	Version 0.6.6
Jamwiki Jamwiki	Version 0.6.7
Jamwiki Jamwiki	Version 0.7.0
Jamwiki Jamwiki	Version 0.7.1
Jamwiki Jamwiki	Version 0.7.2
Jamwiki Jamwiki	Version 0.8.0
Jamwiki Jamwiki	Version 0.8.1
Jamwiki Jamwiki	Version 0.8.2