CVE-2006-0699

medium

Description

Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows remote attackers to inject arbitrary web script or HTML via the query parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24669

http://www.vupen.com/english/advisories/2006/0562

http://www.securityfocus.com/bid/16638

http://secunia.com/advisories/18814

http://insecurity.altervista.org/index.php?m=02&y=06&entry=entry060213-221217

Details

Source: Mitre, NVD

Published: 2006-02-15

Updated: 2026-04-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N