404 matches found
CVE-2008-1229
CVE-2008-1229 describes a cross-site scripting (XSS) vulnerability in JSPWiki, affecting versions 2.4.104 and 2.5.139. The flaw occurs in Edit.jsp via the editor parameter, allowing remote attackers to inject arbitrary script or HTML. The connected documents provide this concrete detail but do no...
CVE-2008-1231
JSPWiki Edit.jsp editor parameter traversal (CVE-2008-1231) is documented in a Nessus plugin entry (JSPWiki Editor LFI). The issue affects JSPWiki versions 2.4.104 and 2.5.139, where input to the editor parameter is not sanitized, allowing a remote attacker to perform a local file inclusion by us...
JSPWiki Multiple Vulnerabilities
JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java, servlets, JSP.” Tested versions: JSPWiki v2.4.104 JSPWik...
JSPWiki 2.4.104 / 2.5.139 Multiple Remote Vulnerabilities
No description provided by source. JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki 鈥...
jspwiki-multi.txt
JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java, servlets, JSP.” Tested versions: JSPWiki v2.4.104 JSPWik...
JSPWiki 2.4.104 / 2.5.139 Multiple Remote Vulnerabilities
Exploit for jsp platform in category web applications ========================================================= JSPWiki 2.4.104 / 2.5.139 Multiple Remote Vulnerabilities ========================================================= JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki –...
jspwiki 2.4.104/2.5.139 - Multiple Vulnerabilities
JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java, servlets, JSP.†Tested versions: JSPWiki v2.4.104...
jspwiki 2.4.1042.5.139 - Multiple Vulnerabilities
jspwiki 2.4.1042.5.139 - Multiple Vulnerabilities JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java,...
CVE-2007-5121
Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...
Design/Logic Flaw
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...
CVE-2007-5120
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
CVE-2007-5120
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
Cross site scripting
Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...
CVE-2007-5119
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...
CVE-2007-5121
Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
CVE-2007-5119
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information full path via an invalid integer in the version parameter to the default URI under attach/Main/...
CVE-2007-5121
Cross-site scripting XSS vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components...
CVE-2007-5120
Multiple cross-site scripting XSS vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject arbitrary web script or HTML via the 1 group and 2 members parameters in a NewGroup.jsp; the 3 edittime parameter in b Edit.jsp; the 4 edittime, 5 author, and 6 link parameters i...
CVE-2007-5120
JSPWiki 2.4.103 and 2.5.139-beta contain multiple XSS vulnerabilities. The flaws affect various JSPWiki pages and parameters: NewGroup.jsp (group, members), Edit.jsp (edittime), Comment.jsp (edittime, author, link), UserPreferences.jsp and Login.jsp (loginname, wikiname, fullname, email), Diff.js...