CVE-2007-1405

Publication date 10 March 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Cross-site scripting (XSS) vulnerability in the “download wiki page as text” feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
trac 9.10 karmic
Fixed 0.10.4-1
9.04 jaunty
Fixed 0.10.4-1
8.10 intrepid
Fixed 0.10.4-1
8.04 LTS hardy
Fixed 0.10.4-1
7.10 gutsy
Fixed 0.10.4-1
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life