CVE-2009-2162: XSS
Published Jun 22, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
16 affected components
Ishii Pukiwikimod<=1.6.6.2
Ishii Pukiwikimod=1.5.1
Ishii Pukiwikimod=1.5.3
Ishii Pukiwikimod=1.5.5
Ishii Pukiwikimod=1.5.6
Ishii Pukiwikimod=1.5.6.1
Ishii Pukiwikimod=1.5.6.2
Ishii Pukiwikimod=1.6.0.1
Ishii Pukiwikimod=1.6.1
Ishii Pukiwikimod=1.6.2
Ishii Pukiwikimod=1.6.3
Ishii Pukiwikimod=1.6.4
Ishii Pukiwikimod=1.6.5
Ishii Pukiwikimod=1.6.5.1
Ishii Pukiwikimod=1.6.6
Xoops Xoops
Event History
Jun 22, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
07:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
Is there a workaround for CVE-2009-2162?
While the best solution is to update the module, a potential workaround is to sanitize user input to prevent script injection until a patch can be applied.