TUCoPS :: Web :: Wiki, Collaborationware :: b06-5399.htm

WikiNi Multiple Cross Site Scripting Vulnerabilities
WikiNi Multiple Cross Site Scripting Vulnerabilities
WikiNi Multiple Cross Site Scripting Vulnerabilities



Hi, I've found 2 XSS vulns in WikiNi. The programmers have been contacted and the vulns addressed in version 0.4.4.

The name parameter of page wakka.php is not properly sanitized:




action="http://www.example.com/wakka.php">
The email parameter of page wakka.php is not properly sanitized:
action="http://www.example.com/wakka.php">
=09 Original advisory: http://zone14.free.fr/advisories/6/ --Raphael HUCK

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH