Unscored severity · published Dec 31, 2004
CVE-2004-2624
Cross-site scripting (XSS) vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
Wackowiki · Wackowiki
r3; r3.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2624
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2624
Patch
http://secunia.com/advisories/12209
wackowiki.com
http://wackowiki.com/WackoDownload/VersionHistory?v=yrv
Patch
http://www.osvdb.org/8295
Patch
http://www.securityfocus.com/bid/10860
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16878
More from Wackowiki
–
CVE-2005-0934
Multiple cross-site scripting (XSS) vulnerabilities in WackoWiki R4 allow remote attackers to inject arbitrary web script or HTML via unknown vectors