CVE-2006-5703: XSS
Cross-site scripting (XSS) vulnerability in tiki-featuredlink.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades filtering, as demonstrated by a parameter value containing malformed, nested SCRIPT elements.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5703?
CVE-2006-5703 is considered a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2006-5703?
To fix CVE-2006-5703, upgrade Tikiwiki to a version that addresses this vulnerability, as filtering for the url parameter needs to be improved.
Who is affected by CVE-2006-5703?
CVE-2006-5703 affects users of Tikiwiki version 1.9.5.
What types of attacks can occur due to CVE-2006-5703?
CVE-2006-5703 can lead to cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
What are the symptoms of exploitation of CVE-2006-5703?
Exploitation of CVE-2006-5703 may result in unexpected script execution in the user’s browser, potentially compromising user data.