CVE-2006-6163: XSS
Cross-site scripting (XSS) vulnerability in tiki-setupbase.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6163?
CVE-2006-6163 is categorized as a moderate severity cross-site scripting vulnerability that allows remote attackers to inject arbitrary JavaScript.
How do I fix CVE-2006-6163?
To fix CVE-2006-6163, upgrade to TikiWiki version 1.9.7 or later, which addresses this vulnerability.
What versions of TikiWiki are affected by CVE-2006-6163?
CVE-2006-6163 affects TikiWiki versions prior to 1.9.7, including 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, and 1.6.1.
Can CVE-2006-6163 be exploited remotely?
Yes, CVE-2006-6163 can be exploited remotely by attackers to perform cross-site scripting attacks.
What type of attack does CVE-2006-6163 enable?
CVE-2006-6163 enables cross-site scripting (XSS) attacks, allowing attackers to execute malicious scripts in users' browsers.