209 matches found
CVE-2008-4112
This CVE-2008-4112 entry is rejected and not active; use CVE-2008-3195 instead.
CVE-2008-4112
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-3195. Reason: This candidate is a duplicate of CVE-2008-3195. Notes: All CVE users should reference CVE-2008-3195 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
TWiki command execution vulnerability
Overview The TWiki wiki software fails to validate input passed to certain URLs. By accessing a URL containing the TWiki configuration script, an attacker may be able to read arbitrary files. Description TWiki is a wiki that is runs in the context of the Apache web server. TWiki is installed by...
TWiki bin/configure 'image' Parameter Traversal Arbitrary File Access/Execution
The version of TWiki running on the remote host allows access to the 'configure' script, and fails to sanitize the 'image' parameter of that script. When the 'action' parameter is set to 'image', an unauthenticated attacker can exploit this issue to execute arbitrary code or to view arbitrary fil...
CVE-2008-3195
creationtimestamp| type| source ---|---|--- 2008-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6269 2008-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6509...
CVE-2007-3195
CVE-2007-3195 describes a cross-site scripting (XSS) vulnerability in the ERFAN WIKI 1.00 software. The issue is in the page index.php where the title parameter can be exploited to inject arbitrary web script or HTML. The description indicates the vulnerability arises from not properly neutralizi...
CVE-2006-3195
CVE-2006-3195 describes a cross-site scripting (XSS) vulnerability in the Singapore CMS prior to 0.10.0, exploitable via the template parameter in index.php. The root cause is insufficient sanitization of the template parameter, allowing remote attackers to inject arbitrary web script or HTML tha...
