Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html.
| Software | From | Fixed in |
|---|---|---|
| michael_christen / yacy | 0.15_build2004-03-18 | 0.15_build2004-03-18.x |
| michael_christen / yacy | 0.22_build2004-07-11 | 0.22_build2004-07-11.x |
| michael_christen / yacy | 0.12_build2004-02-04 | 0.12_build2004-02-04.x |
| michael_christen / yacy | 0.20_build2004-06-14 | 0.20_build2004-06-14.x |
| michael_christen / yacy | 0.14_build2004-02-13 | 0.14_build2004-02-13.x |
| michael_christen / yacy | 0.30_build2004-11-25 | 0.30_build2004-11-25.x |
| michael_christen / yacy | 0.25_build2004-08-22 | 0.25_build2004-08-22.x |
| michael_christen / yacy | 0.11_build2004-01-24 | 0.11_build2004-01-24.x |
| michael_christen / yacy | 0.29_build2004-10-22 | 0.29_build2004-10-22.x |
| michael_christen / yacy | 0.23_build2004-08-08 | 0.23_build2004-08-08.x |
| michael_christen / yacy | build2004-01-05 | build2004-01-05.x |
| michael_christen / yacy | build2004-01-10 | build2004-01-10.x |
| michael_christen / yacy | build2003-12-29 | build2003-12-29.x |
| michael_christen / yacy | build2003-12-15 | build2003-12-15.x |
| michael_christen / yacy | 0.31_build2004-12-09 | 0.31_build2004-12-09.x |
| michael_christen / yacy | 0.13_build2004-02-10 | 0.13_build2004-02-10.x |
| michael_christen / yacy | 0.26_build2004-09-16 | 0.26_build2004-09-16.x |
| michael_christen / yacy | build2004-01-07 | build2004-01-07.x |
| michael_christen / yacy | 0.28_build2004-10-01 | 0.28_build2004-10-01.x |
| michael_christen / yacy | 0.1_build2004-01-19 | 0.1_build2004-01-19.x |
| michael_christen / yacy | 0.24_build2004-08-16 | 0.24_build2004-08-16.x |
| michael_christen / yacy | 0.21_build2004-06-27 | 0.21_build2004-06-27.x |
| michael_christen / yacy | build2003-12-18 | build2003-12-18.x |
| michael_christen / yacy | 0.27_build2004-09-24 | 0.27_build2004-09-24.x |
| michael_christen / yacy | 0.16_build2004-05-03 | 0.16_build2004-05-03.x |