CVE-2007-5052

Multiple cross-site scripting XSS vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or HTML via a request to the wiki module with 1 the title parameter or 2 a "title=" sequence in the PATHINFO, or a request to the download module with 3 the cat...

vigilecms-xss.txt

Name : Vigile CMS v1.8 Multiple Remote XSS Vulnerability Download : http://www.itcms.it/ Date : 20-09-2007 Author : x0kster Mail : [email protected] Note : For works, the wiki or the download module must be installed in the site. PoCs : Wiki 1 :...

Vigile CMS v1.8 Multiple Remote XSS Vulnerability

Name : Vigile CMS v1.8 Multiple Remote XSS Vulnerability Download : http://www.itcms.it/ Date : 20-09-2007 Author : x0kster Mail : [email protected] Note : For works, the wiki or the download module must be installed in the site. PoCs : Wiki 1 :...

[SECURITY] Fedora 7 Update: mediawiki-1.9.4-35.fc7

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Recently updated links for users with personal spaces link to profile if personal space is not accessible

Users without the global access right for personal space can still see links to personal spaces in the "Recently updated" list on their dashboard. This is a serious security problem for extranets, when one wants to prevent non anonymous external users to see who's using the wiki. Note: this probl...

[SECURITY] Fedora 7 Update: mediawiki-1.9.3-34.0.2.fc7

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

DSA-1324-1 hiki

Bulletin has no description...

CVE-2007-3195

CVE-2007-3195 describes a cross-site scripting (XSS) vulnerability in the ERFAN WIKI 1.00 software. The issue is in the page index.php where the title parameter can be exploited to inject arbitrary web script or HTML. The description indicates the vulnerability arises from not properly neutralizi...

CVE-2007-3195

Cross-site scripting XSS vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the OpenWiki formerly JD-Wiki component comjd-wiki 1.0.2, and possibly earlier, for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 dwpage.php or 2 wantedpages.php, different...

Joomla! Component JD-Wiki 1.0.2 - dwpage.php?MosConfig_absolute_path Remote File Inclusion

Joomla! Component JD-Wiki 1.0.2 - dwpage.php?MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/24342/info JD-Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

Joomla! Component JD-Wiki 1.0.2 - wantedpages.php?MosConfig_absolute_path Remote File Inclusion

Joomla! Component JD-Wiki 1.0.2 - wantedpages.php?MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/24342/info JD-Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit...

Joomla! Component JD-Wiki 1.0.2 - 'dwpage.php?MosConfig_absolute_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/24342/info JD-Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in t...

Joomla! Component JD-Wiki 1.0.2 - 'wantedpages.php?MosConfig_absolute_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/24342/info JD-Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in t...

CVE-2007-2613

WikkaWiki Wikka Wiki before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration file by modifying the WAKKACONFIG environment variable...

CVE-2007-2612

The CVE affects WikkaWiki (Wikka Wiki) where the libs/Wakka.class.php component is vulnerable to SQL injection. Versions prior to 1.1.6.3 allow remote attackers to execute arbitrary SQL commands via the limit parameter, with impact on confidentiality, integrity, and availability noted as Partial....

CVE-2007-2551

CVE-2007-2551 affects WikkaWiki (Wikka Wiki) prior to 1.1.6.3. The vulnerability is a Cross-Site Scripting (XSS) in usersettings.php that allows remote attackers to inject arbitrary web script or HTML via the name parameter. Impact is consistent with an XSS in the name field, enabling script exec...

[ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability

ECHOADV78$2007 ----------------------------------------------------------------------------------------- ECHOADV78$2007 C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahro...

JVN#91706484 Trac cross-site scripting vulnerability

Impact A remote attacker could possibly execute an arbitrary script on the user's IE where the user views a Trac wiki content. Solution Products Affected trac 0.10.3 and earlier versions trac-0.10.3-ja-1 and earlier versions...

FreeBSD : trac -- XSS vulnerability (e546c7ce-ce46-11db-bc24-0016179b2dd5)

Secunia reports : The vulnerability is caused due to an error within the 'download wiki page as text' function, which can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Successful exploitation may require that the victim uses IE...