Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2005-4644 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/24183 · WEB
• pypa/advisory-database · WEB
• web.archive.org/web/20140722192945/http://secunia.com/advisories/18465 · WEB
• web.archive.org/web/20151104154255/http://secunia.com/advisories/18555 · WEB
• web.archive.org/web/20200302063657/http://www.securityfocus.com/bid/16198 · WEB
• projects.edgewall.com/trac/ticket/2473 · WEB
• trac.edgewall.org/ticket/2473 · WEB
• debian.org/security/2006/dsa-951 · WEB
• secunia.com/advisories/18465
• secunia.com/advisories/18555
• securityfocus.com/bid/16198 · Patch

trac의 다른 취약점

• CVE-2009-4405높음 7.5Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in…
• CVE-2008-5647보통 5.0Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack…
• CVE-2008-5646높음 7.5Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain…
• CVE-2008-3328보통 4.3Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or …
• CVE-2008-2951보통 6.1Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and …