CVE-2006-4299: XSS

Published Aug 23, 2006

Updated

Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected Software

1 affected component

Tiki Wiki CMS Groupware=1.9.4

Event History

Aug 23, 2006

CVE Published

01:04 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-4299?

CVE-2006-4299 has a moderate severity due to the potential for cross-site scripting attacks.

How do I fix CVE-2006-4299?

To fix CVE-2006-4299, you should upgrade TikiWiki to a version that is not affected by this vulnerability.

What is the impact of CVE-2006-4299?

The impact of CVE-2006-4299 includes the possibility of remote attackers injecting malicious scripts into web pages viewed by users.

Is CVE-2006-4299 specific to any versions of TikiWiki?

Yes, CVE-2006-4299 specifically affects TikiWiki version 1.9.4.

Can I still use TikiWiki version 1.9.4 after CVE-2006-4299?

Using TikiWiki version 1.9.4 is not recommended due to the serious vulnerabilities present, including CVE-2006-4299.