CVEvulnerability

CVE-2007-1405

4.3 MEDIUM Published 2007-03-10 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-03-10
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected configurations

• edgewall software trac 0.10 • edgewall software trac 0.10.1 • edgewall software trac 0.10.2 • edgewall software trac 0.10.3

References

http://secunia.com/advisories/24470 Vendor Advisory
http://trac.edgewall.org/wiki/ChangeLog Patch
http://www.securityfocus.com/bid/22888 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/0900 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32897 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/24470 Vendor Advisory
http://trac.edgewall.org/wiki/ChangeLog Patch
http://www.securityfocus.com/bid/22888 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/0900 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32897 exchange.xforce.ibmcloud.com