This host is running WikkaWiki and is prone to cross-site scripting vulnerability.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to WikkaWiki 1.3.4-p1 or later, For updates refer to http://www.wikkawiki.org

Input passed via 'wakka' parameter to 'wikka.php' script is not properly sanitised before being returned to the user.

WikkaWiki 1.3.4 and probably prior.

Send a crafted data via HTTP GET request and check whether it is able to read the cookie or not.

• http://seclists.org/bugtraq/2013/Sep/47
• http://secunia.com/advisories/54790
• http://www.osvdb.com/97183
• https://www.htbridge.com/advisory/HTB23170

---

Updated on 2015-03-25