CVE:CVE-2010-5054
CNNVD:CNNVD-201111-386
JAMWiki 0.8.4之前版本的Special:Login中存在跨站脚本漏洞。远程攻击者可借助message参数注入任意web脚本或HTML。
solution:Upgrade jamwiki jamwiki to a higher version than 0.8.3,0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.0.9,0.1.0,0.1.1,0.1.2,0.1.3,0.2.0,0.2.1,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,and avoid the version (,0.8.3],0.0.2,0.0.3,0.0.4,0.0.5,0.0.6,0.0.7,0.0.8,0.0.9,0.1.0,0.1.1,0.1.2,0.1.3,0.2.0,0.2.1,0.3.0,0.3.1,0.3.2,0.3.3,0.3.4,0.3.5,0.3.6,0.4.0,0.4.1,0.4.2,0.4.3,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.6.0,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.6.6,0.6.7,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2