CVE-2006-2473: Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbit...

Security readout for executives and security teams

This CVE reports a possible cross-site scripting issue in OpenWiki 0.78. If real, an attacker could make a user’s browser run unwanted script in the OpenWiki site context. The claim is explicitly disputed by the vendor and an affiliated third party, and no severity score is provided. Exposure is most plausible for legacy OpenWiki 0.78 instances, especially internet-facing ow.asp endpoints. The structured affected-product data is incomplete, so confirm by inventory rather than assuming broad exposure. Treat this as a legacy exposure check, not an emergency. Prioritize if OpenWiki 0.78 is internet-facing or handles authenticated users, but the disputed status and lack of KEV evidence reduce confidence in urgent exploitation risk. Mitigation focus: Identify any OpenWiki 0.78 deployments and ownership.; Review vendor pages and advisories for current guidance.; Limit public access to legacy wiki instances where practical..

Prepared

Jun 29, 2026, 12:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.