Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2008-0808

Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script or HTML via meta tags.

Related bugs and status

CVE-2008-0808 (Candidate) is related to these bugs:

Bug #203462: [ikiwiki] [CVE-2008-0808, CVE-2008-0809] cross-site scripting

Summary				In	Importance	Status
	203462	[ikiwiki] [CVE-2008-0808, CVE-2008-0809] cross-site scripting		ikiwiki (Ubuntu)	Medium	Fix Released
	203462	[ikiwiki] [CVE-2008-0808, CVE-2008-0809] cross-site scripting		ikiwiki (Ubuntu Gutsy)	Undecided	Won't Fix

See the

CVE page on Mitre.org for more details.

References

CONFIRM: http://bugs.debian.org...
CONFIRM: http://ikiwiki.info/se...
SECUNIA: 28911
BID: 27760
DEBIAN: DSA-1523
SECUNIA: 29369