CVE-2008-3023

MEDIUM 4.3CVE-2008-3023 · Published 07/07/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
freestyle wiki fswiki	`≤ 3.6.2≤ 3.6.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799.

References

fswiki.org/wiki.pl
jvn.jp/en/jp/JVN77432756/index.html · Third Party Advisory
jvn.jp/jp/JVN77432756/index.html · Third Party Advisory
jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html · Third Party Advisory
secunia.com/advisories/30923 · Vendor Advisory
securityfocus.com/bid/30071 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/43574 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free