Non-secure content warning in IE8 on the Dashboards screen caused by the wiki renderer

Wiki renderer-generated contents e.g. in the activity stream include references to icons with http prefix that cause IE8 to generate security warnings for JIRA instances accessible via HTTPS. To reproduce it, have contents in the activity stream gadget contain icons included by the wiki renderer,...

Tiki Wiki CMS Groupware 5.2 Local File Inclusion

------------------------------------------------------------------------ Software................Tiki Wiki CMS Groupware 5.2 Vulnerability...........Local File Inclusion Download................htp://www.tiki.org Release Date............9/24/2010 Tested On...............Windows Vista + XAMPP...

Tiki Wiki CMS Groupware 5.2 Cross Site Request Forgery

...

Tiki Wiki CMS Groupware 5.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Tiki Wiki CMS Groupware 5.2 Vulnerability...........Reflected Cross-site Scripting Download................htp://www.tiki.org Release Date............9/24/2010 Tested On...............Windows Vista +...

Replace unsafe text gadget and add to JIRA Cloud

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-21965. panel panel:title=Atlassian Update - 23 April 2015|borderStyle=solid|borderColor=ebf2f9|titleBGColor=ebf2f9|bgColor=ffffff Hi everyone...

Replace unsafe text gadget and add to JIRA Cloud

panel:title=Atlassian Update - 23 April 2015|borderStyle=solid|borderColor=ebf2f9|titleBGColor=ebf2f9|bgColor=ffffff Hi everyone, There is an add-on from Atlassian Labs that provides a rich text dashboard gadget for JIRA Cloud. You can find it by searching for "rich text gadget" in the Find New...

Replace unsafe text gadget and add to JIRA Cloud

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-21965. panel panel:title=Atlassian Update - 23 April 2015|borderStyle=solid|borderColor=ebf2f9|titleBGColor=ebf2f9|bgColor=ffffff Hi everyon...

Debian DSA-2083-1 : moin - missing input sanitization

It was discovered that moin, a python clone of WikiWiki, does not sufficiently sanitize parameters when passing them to the addmsg function. This allows a remote attackers to conduct cross-site scripting XSS attacks for example via the template parameter. %NASLMINLEVEL 70300 C Tenable Network...

DSA-2083-1 moin - cross-site scripting

Bulletin has no description...

Lion Wiki 3.2.3 Cross Site Scripting

------------------------------------------------------------------------ Software................Lion Wiki 3.2.3 Vulnerability...........Reflected Cross-site Scripting Download................http://lionwiki.0o.cz/ Release Date............7/11/2010 Tested On...............Windows Vista + XAMPP...

Fedora Update for mediawiki FEDORA-2010-10848

Check for the Version of mediawiki OpenVAS Vulnerability Test Fedora Update for mediawiki FEDORA-2010-10848 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 12 Update: mediawiki-1.15.4-54.fc12

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

[SECURITY] Fedora 13 Update: mediawiki-1.15.4-54.fc13

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

[SECURITY] Fedora 12 Update: mediawiki-1.15.3-53.fc12

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Wiki Web Help Cross Site Scripting and HTML Injection Vulnerabilities

Wiki Web Help is prone to a cross-site scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code could run in the context of the affected...

Wiki Web Help 'getpage.php' SQL Injection Vulnerability

Wiki Web Help is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Wiki Web Help 0.28 SQL Injection

Version: v0.28 Possible all versions Vendor: Richard Bondi - http://wikiwebhelp.org Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip Description: "The goal of this project is to create a help application that is editable by the community. Standard wiki systems are great for many application...

WikiWebHelp 0.28 - SQL Injection

WikiWebHelp 0.28 - SQL Injection Version: v0.28 Possible all versions Vendor: Richard Bondi - http://wikiwebhelp.org Download: http://wikiwebhelp.org/release/wwh-0.2.8.zip Description: "The goal of this project is to create a help application that is editable by the community. Standard wiki syste...

Wiki Web Help 0.2.7 cross site scripting

No description provided by source. ------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Persistent/Reflected XSS Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010...

Wiki Web Help 0.2.7 Shell Upload

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista + XAMPP...