Hi, I've found 2 XSS vulns in WikiNi. The programmers have been contacted and the vulns addressed in version 0.4.4.

The name parameter of page wakka.php is not properly sanitized:




action="http://www.example.com/wakka.php"> 











The email parameter of page wakka.php is not properly sanitized:




action="http://www.example.com/wakka.php"> 









=09

Original advisory: http://zone14.free.fr/advisories/6/ 

--Raphael HUCK