Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Yacy | Michael_christen | 0.1_build2004-01-19 (including) | 0.1_build2004-01-19 (including) |
| Yacy | Michael_christen | 0.11_build2004-01-24 (including) | 0.11_build2004-01-24 (including) |
| Yacy | Michael_christen | 0.12_build2004-02-04 (including) | 0.12_build2004-02-04 (including) |
| Yacy | Michael_christen | 0.13_build2004-02-10 (including) | 0.13_build2004-02-10 (including) |
| Yacy | Michael_christen | 0.14_build2004-02-13 (including) | 0.14_build2004-02-13 (including) |
| Yacy | Michael_christen | 0.15_build2004-03-18 (including) | 0.15_build2004-03-18 (including) |
| Yacy | Michael_christen | 0.16_build2004-05-03 (including) | 0.16_build2004-05-03 (including) |
| Yacy | Michael_christen | 0.20_build2004-06-14 (including) | 0.20_build2004-06-14 (including) |
| Yacy | Michael_christen | 0.21_build2004-06-27 (including) | 0.21_build2004-06-27 (including) |
| Yacy | Michael_christen | 0.22_build2004-07-11 (including) | 0.22_build2004-07-11 (including) |
| Yacy | Michael_christen | 0.23_build2004-08-08 (including) | 0.23_build2004-08-08 (including) |
| Yacy | Michael_christen | 0.24_build2004-08-16 (including) | 0.24_build2004-08-16 (including) |
| Yacy | Michael_christen | 0.25_build2004-08-22 (including) | 0.25_build2004-08-22 (including) |
| Yacy | Michael_christen | 0.26_build2004-09-16 (including) | 0.26_build2004-09-16 (including) |
| Yacy | Michael_christen | 0.27_build2004-09-24 (including) | 0.27_build2004-09-24 (including) |
| Yacy | Michael_christen | 0.28_build2004-10-01 (including) | 0.28_build2004-10-01 (including) |
| Yacy | Michael_christen | 0.29_build2004-10-22 (including) | 0.29_build2004-10-22 (including) |
| Yacy | Michael_christen | 0.30_build2004-11-25 (including) | 0.30_build2004-11-25 (including) |
| Yacy | Michael_christen | 0.31_build2004-12-09 (including) | 0.31_build2004-12-09 (including) |
| Yacy | Michael_christen | build2003-12-15 (including) | build2003-12-15 (including) |
| Yacy | Michael_christen | build2003-12-18 (including) | build2003-12-18 (including) |
| Yacy | Michael_christen | build2003-12-29 (including) | build2003-12-29 (including) |
| Yacy | Michael_christen | build2004-01-05 (including) | build2004-01-05 (including) |
| Yacy | Michael_christen | build2004-01-07 (including) | build2004-01-07 (including) |
| Yacy | Michael_christen | build2004-01-10 (including) | build2004-01-10 (including) |