2047 matches found
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user execute arbitrary code...
CVE-2013-6022
A Cross-Site Scripting XSS vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user execute arbitrary code...
CVE-2013-6022
The CVE-2013-6022 entry describes a cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 11.0 (and possibly earlier) exposed via the ZeroClipboard.swf file parameter id. The root cause is improper neutralization of input in web page generation (CWE-79), allowing a remote attacker t...
The vulnerability of JSP-based software technologies like Apache JSPWiki allows attackers to execute cross-site scripting attacks.
The vulnerability of JSP-based software, such as Apache JSPWiki, is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...
CVE-2011-4336
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarfajax.php...
Design/Logic Flaw
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarfajax.php...
CVE-2011-4336
CVE-2011-4336 affects Tiki Wiki CMS Groupware 7.0. It is a cross-site scripting (XSS) vulnerability exploitable via the GET parameter “ajax” sent to snarf_ajax.php, caused by insufficient input sanitization. Successful exploitation could execute arbitrary script in a victim’s browser, potentially...
CVE-2011-4336
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarfajax.php...
CVE-2019-18454
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...
CVE-2019-18454
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...
CVE-2019-18454
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...
Cross site scripting
An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...
CVE-2019-18454
Removed by vendor...
TWiki Injection Vulnerability
TWiki is the U.S. Peter Thoeny software developers of a set of Perl-based open source Wiki program , is a Web-based site collaboration platform , it can be used for project development management , document management , knowledge base management and other collaborative work . There is an injectio...
Tiki Wiki CMS Groupware cross-site scripting vulnerability (CNVD-2019-39359)
Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site scripting vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which stems from a lack of proper validation of client-side data in the web application and can be exploited ...
Tiki Wiki CMS Groupware Cross-Site Request Forgery Vulnerability
Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site request forgery vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which arises from a WEB application that does not adequately validate that a request is coming from a...
Tiki Wiki CMS Groupware File Inclusion Vulnerability
Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A file inclusion vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which can be exploited by an attacker to include arbitrary files...
CVE-2010-4240
Tiki Wiki CMS Groupware 5.2 has XSS...