Description

Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Remediation

References

CVE-2006-2840

Related Vulnerabilities

WordPress Plugin 10Web Social Feed for Instagram Security Bypass (1.3.18)

Oracle Database Server CVE-2007-5510 Vulnerability (CVE-2007-5510)

Jenkins CVE-2023-43494 Vulnerability (CVE-2023-43494)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Local File Inclusion (1.3.64)

Ruby on Rails CVE-2024-28103 Vulnerability (CVE-2024-28103)

Severity

Medium

Classification

CVE-2006-2840

Tags

Missing Update Known Vulnerabilities