CVEvulnerability
CVE-2005-4644
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
Affected configurations
• edgewall software trac 0.9.2
References
- http://projects.edgewall.com/trac/ticket/2473 Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/18465 secunia.com
- http://secunia.com/advisories/18555 secunia.com
- http://trac.edgewall.org/ticket/2473 trac.edgewall.org
- http://www.debian.org/security/2006/dsa-951 www.debian.org
- http://www.securityfocus.com/bid/16198 Patch
- http://www.vupen.com/english/advisories/2006/0226 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24183 exchange.xforce.ibmcloud.com
- http://projects.edgewall.com/trac/ticket/2473 Exploit, Patch, Vendor Advisory
- http://secunia.com/advisories/18465 secunia.com
- http://secunia.com/advisories/18555 secunia.com
- http://trac.edgewall.org/ticket/2473 trac.edgewall.org
- http://www.debian.org/security/2006/dsa-951 www.debian.org
- http://www.securityfocus.com/bid/16198 Patch
- http://www.vupen.com/english/advisories/2006/0226 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24183 exchange.xforce.ibmcloud.com