2042 matches found
CVE-2006-3380
CVE-2006-3380 affects FreeStyle Wiki before 3.6.2, where an algorithmic complexity vulnerability allows a remote attacker to cause a denial of service by diffing large, crafted pages to trigger worst-case behavior. The connected JVN entry and NVD record corroborate a DoS via CPU consumption, trig...
CVE-2006-3257
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
CVE-2006-3257
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
CVE-2006-2966
Cross-site scripting XSS vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element with an extraneous IMG tag and a STYLE attribute that contains "//" comment sequences, which bypasses the XSS protection scheme...
CVE-2006-2966
Particle Soft Particle Wiki 1.0.2 is documented as having an XSS vulnerability where a BR tag containing an extraneous IMG tag and a STYLE attribute with a "/**/" sequence can bypass the XSS protection scheme, allowing remote attackers to inject arbitrary web script or HTML. The available sources...
CVE-2006-2861
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter...
Sql injection
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter...
CVE-2006-2861
Particle Wiki is vulnerable to an SQL injection in index.php for version 1.0.2 and earlier, due to improper sanitization of user input before SQL queries. The OpenVAS entries detail that exploitation could allow data access or modification and potential compromise of the underlying database. The ...
CVE-2006-2861
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter...
Particle Wiki 1.0.2 - SQL Injection
Particle Wiki 1.0.2 - SQL Injection Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Particle Wiki = 1.0.2 version Remote SQL Injection Vulnerability =================================================================== Particle wiki = 1.0.2 Remote...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Particle Wiki 1.0.2 - SQL Injection
Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Igloo 0.1.9 and prior [(text_wiki mod)] - Remote File Include Vulnerabilities
DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed,...
Open Wiki 0.78 - ow.asp Cross-Site Scripting
Open Wiki 0.78 - ow.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/18013/info Open Wiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Open Wiki 0.78 - 'ow.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18013/info Open Wiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...
FreeBSD : trac -- Wiki Macro Script Insertion Vulnerability (400d9d22-d6c5-11da-a14b-00123ffe8333)
Secunia reports : A vulnerability has been reported, which can be exploited by malicious people to conduct script insertion attacks. Input passed using the wiki macro isn't properly sanitised before being used. This can be exploited to inject arbitrary HTML and script code, which will be executed...
CVE-2006-2106
Cross-site scripting XSS vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro."...
Cross site scripting
Cross-site scripting XSS vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro."...
DEBIAN-CVE-2006-2106
Cross-site scripting XSS vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro."...