Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
Ask the Team  Mailing Lists  Advertising Info  Advisories  About SecuriTeam  Blogs Brought to you by: Suppliers of: Website Testing Tools Network Testing Tools Software Testing Tools SecuriTeam in Your Inbox New vulnerability? New tool? Tell us (Our PGP key).	UseModWiki XSS 28 Dec. 2004    Summary UseModWiki is "a famous wiki web applications". UseModWiki has been found to contain a cross-site scripting vulnerability.   Credit: The information has been provided by SSR Team. Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    Details Protect your website! Use an External Vulnerability Scanner! Nothing to install. First report in 1 hour! www.beyondsecurity.com/vulnerability-scanner Due to an input validation flaw in its parsing of user provided information, UseModWiki is vulnerable to cross-site scripting attacks. Example: http://[victim]/cgi-bin/wiki.pl?< script>alert('XSSvulnerabilityexists')</script> Disclosure Timeline: 2004-10-01 Vulnerability found 2004-10-01 UseModWiki developer notified 2004-10-02 UseModWiki developer confirmed 2004-12-09 Official release  Comments:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Publique! CMS and SQL Injection Vulnerabilities Files2Links F2L-3000 SQL Injection Vulnerability HP-UX Running Apache Data Injection and DoS Vulnerability MIT krb5 KDC denial of service in cross-realm referral processing AproxEngine Multiple Vulnerabilities APC Switched Rack PDU XSS Vulnerability HP-UX Running OpenSSL Unauthorized Data Injection and Denial of Service HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability HP OpenView NNM ovwebsnmpsrv.exe OVwSelection Stack Overflow Vulnerability HP-UX Running VRTSweb Remote Execution of Arbitrary Code and Privilege Escalation FreeBSD SSL and TLS Session Renegotiation vulnerability CoreHTTP Web Server Buffer Overflow Vulnerability HP OpenView Network Node Manager DoS Vulnerability ToutVirtual VirtualIQ Multiple Vulnerabilities Transport Layer Security Renegotiation Vulnerability  Featured Articles Microsoft Embedded OpenType Font Engine Heap Buffer Overflow (MS09-029) Virtualmin Multiple Vulnerabilities Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability (MS09-010) WordPress Unchecked Privileges in admin.php and Multiple Information Disclosures Microsoft PowerPoint Conversion Filter Heap Corruption Vulnerability (MS09-017) Adobe Shockwave Player Director File Parsing Pointer Overwrite Mozilla Firefox Java Applet Loading Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®