PmWiki 2.1.19 - 'Zend_Hash_Del_Key_Or_Index' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on -------------------------------------------------------------------------------- '; die; errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function quickdump$...

CVE-2006-4453

Cross-site scripting XSS vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups"...

CVE-2006-4453

PmWiki before 2.1.18 contains a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving “table markups.” The issue is documented under CVE-2006-4453 with a CVSS v2 base score of 4.3 (Medium) and an attack vecto...

CVE-2006-4453

Cross-site scripting XSS vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups"...

[SA21667] PmWiki Table Markups Script Insertion Vulnerability

TITLE: PmWiki Table Markups Script Insertion Vulnerability SECUNIA ADVISORY ID: SA21667 VERIFY ADVISORY: http://secunia.com/advisories/21667/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PmWiki 2.x http://secunia.com/product/6195/ DESCRIPTION: A...

CVE-2006-2840

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2006-2840

CVE-2006-2840 is an XSS vulnerability in PmWiki 2.1.6 and earlier, affecting the uploads.php and the "url links" functionality. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, with a CVSS base score of 6.8 (MEDIUM). Affected software: PmWiki

CVE-2006-2840

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

PmWiki < 2.1 beta 21 Multiple Vulnerabilities

The remote host is running PmWiki, an open source Wiki written in PHP. The version of PmWiki installed on the remote host allows attackers to overwrite global variables if run under PHP 5 with 'registerglobals' enabled. For example, an attacker can exploit this issue to overwrite the 'FarmD'...

CVE-2006-0479

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

Cross site scripting

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

CVE-2006-0479

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

CVE-2006-0479

The CVE covers PmWiki 2.1 beta 20 (and vulnerable up to 2.1 beta 21) where enabling PHP register_globals lets remote attackers bypass protections by setting a GPC variable and a GLOBALS[] with the same name. This causes GLOBALS[] to be unset while the GPC variable remains, enabling issues such as...

PmWiki 2.1 - Multiple Input Validation Vulnerabilities

PmWiki 2.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include...

PmWiki <=2.1 Beta20 Multiple Vulnerabilities

Binary data 3391.prm...

PmWiki 2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include vulnerability. Exploitation of this issue will result in...

PmWiki Multiple Vulnerabilities

This is both a PmWiki and PHP advisory, and works only with registerglobals on. I totally missed the PHP GLOBALS GPC injection vulnerability and rediscovered that by my own if just few month before! arg!. Basically in the worst scenario be are in front of two separate vulnerabilities: one regardi...

pmwikiXSS.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0005 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ PmWiki 2.0.12 Cross Site Scripting +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON Nov 22, 2005 PUBLISHED AT...

CVE-2005-3849

Cross-site scripting XSS vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script or HTML via the q parameter...