CVE-2022-36350

Stored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-34486

Path traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated attacker with an administrative privilege to execute a malicious script via unspecified vectors...

CVE-2022-34486

CVE-2022-34486 concerns a path traversal vulnerability in PukiWiki versions 1.4.5–1.5.3. The issue allows a remote authenticated attacker with administrative privileges to execute a malicious script via unspecified vectors, indicating a potentially high impact (CVE details show high severity in s...

CVE-2022-27637

Reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-27637

CVE-2022-27637 is a reflected cross-site scripting vulnerability in PukiWiki versions 1.5.1–1.5.3. The flaw allows a remote attacker to inject arbitrary JavaScript via unspecified vectors, with the impact described as user script execution in the affected web application. The public details consi...

PukiWiki vulnerable to cross-site scripting

Overview PukiWiki provided by PukiWiki Developers Team contains a stored cross-site scripting vulnerability CWE-79. Ryuhoh Ide of Department of Applied Physics, School of Engineering, The University of Tokyo reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

PT-2022-23324 · Pukiwiki · Pukiwiki

Name of the Vulnerable Software and Affected Versions: PukiWiki versions 1.3.1 through 1.5.3 Description: A stored cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For PukiWiki versions 1.3.1 through 1.5.3, update to a...

JVN#43979089: PukiWiki vulnerable to cross-site scripting

PukiWiki provided by PukiWiki Developers Team contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who accessed the site using the product. Solution Update the Software Update the Software to the latest version...

PukiWiki 跨站脚本漏洞

PukiWiki is a suite of Wiki software from Lindsay's personal developer. A security vulnerability exists in PukiWiki versions 1.5.1 through 1.5.3 that could allow a remote attacker to inject arbitrary scripts via unspecified vectors...

PT-2022-22177 · Pukiwiki · Pukiwiki

Name of the Vulnerable Software and Affected Versions: PukiWiki versions 1.4.5 to 1.5.3 Description: A path traversal issue allows a remote authenticated attacker with administrative privileges to execute a malicious script. The attack vector is not specified. Recommendations: For PukiWiki versio...

PukiWiki 跨站脚本漏洞

PukiWiki is a set of Wiki software by Lindsay's personal developer. A security vulnerability exists in PukiWiki versions 1.3.1 through 1.5.3. A remote attacker can exploit this vulnerability to inject arbitrary scripts via unspecified vectors...

PukiWiki 路径遍历漏洞

PukiWiki is a wiki software package developed by Lindsay. A security vulnerability exists in PukiWiki versions 1.4.5 through 1.5.3, which stems from a path traversal vulnerability. A remote attacker can exploit this vulnerability to execute malicious scripts via unspecified vectors...

PT-2022-18541 · Pukiwiki · Pukiwiki

Name of the Vulnerable Software and Affected Versions: PukiWiki versions 1.5.1 through 1.5.3 Description: A reflected cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For PukiWiki versions 1.5.1 through 1.5.3, update to a...

CVE-2011-3990

Cross-site scripting XSS vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3990

Cross-site scripting XSS vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-3990

Affected software: PukiWiki Plus!; vulnerable component: plugin/comment.inc.php. The CVE describes a cross-site scripting (XSS) vulnerability in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Root cause in th...

PukiWiki Plus! vulnerable to cross-site scripting

Overview PukiWiki Plus! contains a cross-site scripting vulnerability. PukiWiki Plus! is a software that adds wiki functionality to websites. PukiWiki Plus! contains a vulnerability in handling web form entries, which may result in cross-site scripting. Koki Nakayasu of Keiji Takeda Lab, Keio...

JVN#76515037: PukiWiki Plus! vulnerable to cross-site scripting

PukiWiki Plus! is a software that adds wiki functionality to websites. PukiWiki Plus! contains a vulnerability in handling web form entries, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the...