VWE-2010-0070 Printable Version

https://www.vaultwiki.org/pages/Book/Documentation/VWE-2010-0070
This page is a chapter in Info Known Vulnerabilities

This page has been seen 148,494 times.

- Created by
  dianiz
  on April 18, 2015
  
  Last updated by
  pegasus
  on February 16, 2017

Common Name Redirect Inheritance Vulnerability
VWE-ID VWE-2010-0070
Related Report None
Severity HIGH
Exploit Difficulty EASY
Platform Affects all platforms supported by the vulnerable versions.
Description HTML/Javascript injection.

Discovered May 6, 2010
Resolved May 15, 2010
Patches Available 3.0.0 RC 3
2.5.7 Patch Level 1
Workaround Update all wiki forums so that none allow HTML.
The versions listed below are known to be affected by this issue. If you are using one of those versions, you should update to a newer release that has no known vulnerabilities.

Common Name	Redirect Inheritance Vulnerability
VWE-ID	VWE-2010-0070
Related Report	None
Severity	HIGH
Exploit Difficulty	EASY
Platform	Affects all platforms supported by the vulnerable versions.
Description	HTML/Javascript injection.
Discovered	May 6, 2010
Resolved	May 15, 2010
Patches Available	3.0.0 RC 3 2.5.7 Patch Level 1
Workaround	Update all wiki forums so that none allow HTML.