CVE-2012-1212

CVE-2012-1212 concerns a cross-site scripting (XSS) vulnerability in Semantic Enterprise Wiki (SMW+) via the smwfOnSfSetTargetName path in SMW_Initialize.php. Affected versions are SMW+ 1.5.6 and 1.6.0_2 and earlier; the issue is triggered remotely by supplying a crafted target parameter to index...

Tiki Wiki CMS Groupware - url Open Redirection

Tiki Wiki CMS Groupware - url Open Redirection source: https://www.securityfocus.com/bid/52079/info Tiki Wiki CMS Groupware is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...

Tiki Wiki CMS Groupware - 'url' Open Redirection

source: https://www.securityfocus.com/bid/52079/info Tiki Wiki CMS Groupware is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible...

Tiki Wiki CMS Groupware Frame Injection

Exploit Title: Tiki Wiki CMS Groupware Frame Injection Date: 17.02.2012 Author: Sony Software Link: http://info.tiki.org/tiki-index.php Google Dorks: inurl:tiki-featuredlink.php?type= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

AtWiki Cross Site Scripting

Exploit Title: @Wiki Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://atwiki.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wiki-cross-site-scripting.html...

SnipSnap Wiki <= 1.0b3 XSS Vulnerability - Active Check

SnipSnap is prone to a cross-site scripting XSS vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Brainkeeper Enterprise Wiki 'search.php' XSS Vulnerability

Brainkeeper Enterprise Wiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Brainkeeper Enterprise Wiki Cross Site Scripting

Exploit Title: Brainkeeper Enterprise Wiki "search.php" Cross Site Scripting Date: 6.02.2012 Author: Sony Software Link: http://www.brainkeeper.com Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/brainkeeper-enterprise-wiki-searchphp.html...

Tiki Wiki CMS Groupware 8.2 RCE

Tiki Wiki CMS Groupware RCE pregreplace snarfajax.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

DEBIAN-CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

UBUNTU-CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

PT-2011-5172 · Yaws · Yaws

Name of the Vulnerable Software and Affected Versions: Yaws version 1.88 Description: The wiki application in Yaws contains multiple cross-site scripting XSS issues, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved through various parameters, including tag in...

Tiki Wiki CMS Groupware &lt;= 8.2 &#40;snarf_ajax.php&#41; Remote PHP Code Injection

------------------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.2 snarfajax.php Remote PHP Code Injection ------------------------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............:...

Tiki Wiki CMS Groupware Stored Cross-Site-Scripting

Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...

Tiki Wiki CMS Groupware 8.2 - 'snarf_ajax.php' Remote PHP Code Injection

------------------------------------------------------------------------- Tiki Wiki CMS Groupware /tiki-8.2/snarfajax.php?url=1&regexres=phpinfo&regex=//e%00/ Tiki internal filters remove all null bytes from user input, but for some strange reason this doesn't happen within admin sessions. So,...

Tiki Wiki CMS Groupware 8.2 - snarf_ajax.php Remote PHP Code Injection

Tiki Wiki CMS Groupware 8.2 - snarfajax.php Remote PHP Code Injection ------------------------------------------------------------------------- Tiki Wiki CMS Groupware /tiki-8.2/snarfajax.php?url=1&regexres=phpinfo&regex=//e%00/ Tiki internal filters remove all null bytes from user input, but for...

Tiki Wiki CMS Groupware 'show_errors' Parameter Stored XSS Vulnerability

Tiki Wiki CMS Groupware is prone to a stored cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tiki Wiki CMS Groupware 8.1 / 6.4 LTS Cross Site Scripting

Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...

Tiki Wiki CMS Groupware < 8.1 URL Multiple XSS Vulnerabilities

Tiki Wiki CMS Groupware is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...