CVE-2006-2473

Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter

published May 19, 2006

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product. The vendor states "You cannot insert code in a wikipage or via URL parameters as they are all escaped before usage, so nothing can be compromised at other sites.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01941 · 80.0th percentile
Published
2006-05-19T17:00Z
EPSS history
Timeline
  • 19 MAY 17:00Z
    Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter
    cvelistv5