CVE-2013-6047

NameCVE-2013-6047
DescriptionMultiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ikiwiki-hosting (PTS)buster0.20180719-1fixed
bullseye0.20180719-2fixed
sid, trixie, bookworm0.20220716-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ikiwiki-hostingsource(unstable)0.20131025

Notes

[wheezy] - ikiwiki-hosting <no-dsa> (Minor XSS)

Search for package or bug name: Reporting problems