| Package | Affected versions | Patched versions |
|---|---|---|
| webgui | = 6.3.0= 6.4.0= 6.5.0= 6.5.1= 6.5.2= 6.5.3= 6.5.4= 6.5.5= 6.5.6= 6.6.0= 6.6.1= 6.6.2= 6.6.3= 6.6.4= 6.6.5= 6.7.0= 6.7.1= 6.7.2= 6.7.3= 6.7.4= 6.7.5= 6.7.6= 6.8.1= 6.8.2= 6.8.3= 6.8.4= 6.8.5= 6.8.6= 7.2.3= 7.3.4_beta |
Cross-site scripting (XSS) vulnerability in Operation/User.pm in Plain Black WebGUI before 7.3.5 (beta) allows remote attackers to inject arbitrary web script or HTML via the username parameter during anonymous registration, a different vector than CVE-2007-0308. NOTE: it is possible that a separate "WikiPage titles" issue was also fixed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free