CVE-2008-0809

Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
ikiwikiikiwiki
𝑥
≤ 1.45
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ikiwiki
bookworm
3.20200202.3-1
fixed
bullseye
3.20200202.3-1
fixed
sid
3.20200202.4-2.1
fixed
trixie
3.20200202.4-2.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ikiwiki
intrepid
Fixed 2.32.3
released
hardy
Fixed 2.32.3
released
gutsy
ignored
feisty
ignored
edgy
ignored
dapper
dne
Common Weakness Enumeration
References
http://ikiwiki.info/security/#index27h2
http://secunia.com/advisories/28911
http://secunia.com/advisories/29369
http://www.debian.org/security/2008/dsa-1523
http://www.securityfocus.com/bid/27760
http://ikiwiki.info/security/#index27h2
http://secunia.com/advisories/28911
http://secunia.com/advisories/29369
http://www.debian.org/security/2008/dsa-1523
http://www.securityfocus.com/bid/27760