Vulnerabilities > CVE-2006-2840 - Unspecified vulnerability in Pmwiki

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

pmwiki

NVD

Published: 2006-06-06

Updated: 2024-11-21

Summary

Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Vulnerable Configurations

Part	Description	Count
Application	Pmwiki Pmwiki Pmwiki 2.1.2 Pmwiki Pmwiki 2.0.5 Pmwiki Pmwiki 2.0.0 Pmwiki Pmwiki 2.0.8 Pmwiki Pmwiki 2.0.4 Pmwiki Pmwiki 2.1.4 Pmwiki Pmwiki 2.0.1 Pmwiki Pmwiki 2.0.13 Pmwiki Pmwiki 2.1.5 Pmwiki Pmwiki 2.0.2 Pmwiki Pmwiki 2.0.7 Pmwiki Pmwiki 2.1.1 Pmwiki Pmwiki 2.0.3 Pmwiki Pmwiki 2.0.6 Pmwiki Pmwiki 2.0.9 Pmwiki Pmwiki 2.0.10 Pmwiki Pmwiki 2.0.11 Pmwiki Pmwiki 2.0.12 Pmwiki Pmwiki 2.1.0 Pmwiki Pmwiki 2.1.3 Pmwiki Pmwiki 2.1.6	21

Summary

Vulnerable Configurations

References