Unrated severityNVD Advisory· Published Sep 25, 2013· Updated Apr 29, 2026
CVE-2013-5586
CVE-2013-5586
Description
Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.
Affected products
37cpe:2.3:a:wikkawiki:wikkawiki:1.0.0:*:*:*:*:*:*:*+ 36 more
- cpe:2.3:a:wikkawiki:wikkawiki:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:*:*:*:*:*:*:*:*range: <=1.3.4
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:wikkawiki:wikkawiki:1.3.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
13- archives.neohapsis.com/archives/bugtraq/2013-09/0048.htmlnvdExploit
- packetstormsecurity.com/files/123196nvdExploit
- seclists.org/bugtraq/2013/Sep/47nvdExploit
- wush.net/trac/wikka/changeset/1896nvdExploitPatch
- wush.net/trac/wikka/changeset/1900nvdExploitPatch
- secunia.com/advisories/54790nvdVendor Advisory
- docs.wikkawiki.org/WhatsNew134nvd
- osvdb.org/97183nvd
- www.securityfocus.com/bid/62325nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/87013nvd
- wush.net/trac/wikka/ticket/1152nvd
- wush.net/trac/wikka/ticket/1153nvd
- www.htbridge.com/advisory/HTB23170nvd
News mentions
0No linked articles in our index yet.