The vulnerability of the FosWiki platform, due to insufficient verification of data authenticity, allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the FosWiki platform is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality of the protected information...

The vulnerability of the FosWiki platform, related to the lack of measures taken to protect the website structure, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the FosWiki platform lies in the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

PT-2025-118: UNION-based SQL injection in MentionsPlugin for FosWiki

The vulnerability was identified in MentionsPlugin for FosWiki 2.1.9. The vulnerability can be exploited due to insufficient validation of user input. This allows an attacker to inject arbitrary SQL statements and thereby modify the logic of database queries. Vulnerability status: Confirmed by...

PT-2025-54565

Уязвимость платформы FosWiki,связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

PT-2025-54563

Уязвимость платформы FosWiki связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный SQL-запрос...

PT-2025-54566

Уязвимость платформы FosWiki связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность защищаемой информации...

PT-2025-54564

Уязвимость платформы FosWiki,связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

CVE-2023-33756

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...

CVE-2023-24698

Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...

CVE-2012-1004

Multiple cross-site scripting XSS vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the 1 text, 2 FirstName, 3 LastName, 4 OrganisationName, 5 OrganisationUrl, 6 Profession, 7 Country, 8...

CVE-2023-33756

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...

CVE-2023-33756

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...

CVE-2023-33756

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...

CVE-2023-24698

Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...

CVE-2023-24698

Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...

CVE-2023-24698

Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...

Directory traversal

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal...

Directory traversal

Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying a crafted web request...

Foswiki Path Traversal Vulnerability

Foswiki is a Wiki software developed in the Perl language.Foswiki is a truly free and open-source Wiki and user-built application platform for public and corporate environments. A security vulnerability exists in Foswiki v2.1.7 and earlier versions, which stems from insufficient validation of...

Foswiki Path Traversal Vulnerability

Foswiki is a Wiki software developed in the Perl language.Foswiki is a truly free and open-source Wiki and user-built application platform for public and corporate environments. A security vulnerability exists in Foswiki v2.1.7 and earlier versions, which stems from a problem in the...