Wikipad Multiple Vulnerabilities
Wikipad is prone to a cross-site scripting vulnerability, an HTML-injection vulnerability, and an information-disclosure vulnerability. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and obtain sensitive information. Information-disclosure can be exploited by accessing a URL such as http://www.example.com/pages.php?id=./../../../../../txt_file. Cross-site scripting can be exploited by accessing a URL such as http://www.example.com/pages.php?id=index"><script>alert(document.cookie)</script> or http://www.example.com/pages.php?action=edit&id=27-01-2011"><script>alert(document.cookie)</script>. HTML-injection can be exploited by submitting a form with malicious code such as <input type="hidden" name="data[text]" value='text"><script>alert(document.cookie)</script>'> and then submitting the form with a script such as <script>document.main.submit();</script>.
