CVE-2022-23375

WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php...

EUVD-2025-21309

Malicious code in bioql PyPI...

EUVD-2022-28455

Malicious code in bioql PyPI...

EUVD-2025-22010

Malicious code in bioql PyPI...

EUVD-2024-52192

Malicious code in bioql PyPI...

CVE-2025-7887

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-7887

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-7887

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-7887 Zavy86 WikiDocs template.inc.php cross site scripting

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-7887

CVE-2025-7887 affects Zavy86 WikiDocs up to version 1.0.78. The vulnerability is triggered by manipulation of the path argument in template.inc.php, enabling cross-site scripting via remote access. Multiple sources confirm the issue and that the exploit has been disclosed publicly. Impact is limi...

CVE-2025-7887 Zavy86 WikiDocs template.inc.php cross site scripting

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

PT-2025-30189 · Unknown · Zavy86 Wikidocs

Name of the Vulnerable Software and Affected Versions: Zavy86 WikiDocs versions through 1.0.78 Description: A vulnerability exists in Zavy86 WikiDocs, potentially allowing for cross site scripting. The issue is located in the file template.inc.php and involves manipulation of the path argument. T...

CVE-2025-7575

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...

CVE-2025-7575

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...

CVE-2025-7575

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...

CVE-2025-7575 Zavy86 WikiDocs submit.php image_delete_ajax path traversal

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...

CVE-2025-7575 Zavy86 WikiDocs submit.php image_delete_ajax path traversal

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function imagedropuploadajax/imagedeleteajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version...

CVE-2025-7575

CVE-2025-7575 affects Zavy86 WikiDocs up to version 1.0.77. The vulnerability lies in the image_drop_upload_ajax and image_delete_ajax functions in submit.php, enabling path traversal. The issue can be exploited remotely and may impact confidentiality, integrity, and availability as described in ...

PT-2025-29425 · Unknown · Zavy86 Wikidocs

Name of the Vulnerable Software and Affected Versions: Zavy86 WikiDocs versions through 1.0.77 Description: A critical issue exists in Zavy86 WikiDocs that allows for path traversal. The vulnerability is located in the image drop upload ajax/image delete ajax function within the submit.php file...

WikiDocs 安全漏洞

WikiDocs is a database-free Markdown flat file Wiki engine by the individual developer Manuel Zavatta in Italy. A security vulnerability exists in WikiDocs version 1.0.77 and earlier, which stems from path traversal due to misbehavior of the imagedropuploadajax/imagedeleteajax functions in the fi...