Vulnerabilities > CVE-2006-2106 - Remote HTML Injection vulnerability in Edgewall Software Trac 0.9.4

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
edgewall-software
NVD
Published: 2006-04-29
Updated: 2017-07-20

Summary

Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro."

Vulnerable Configurations

Part Description Count
Application
Edgewall_Software
1

References