88 matches found
CVE-2006-7050
Cross-site scripting XSS vulnerability in WikkaWiki Wikka Wiki before 1.1.6.2 allows remote attackers to inject arbitrary javascript via 1 events in forced links url parameter that are not properly handled in formatters/wakka.php, and possibly 2 other vectors in wikka.php...
CVE-2006-7049
CVE-2006-7049 affects WikkaWiki prior to 1.1.6.2. The Method() in wikka.php calls strstr and strrpos with arguments in the wrong order, which can bypass access restrictions and allow remote attackers to access arbitrary PHP files. Public references also describe it as a local file inclusion vulne...
[SA20628] Wikkawiki Two Vulnerabilities
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
CVE-2005-4255
CVE-2005-4255 is a cross-site scripting (XSS) vulnerability in the TextSearch component of WikkaWiki 1.1.6.0 . The issue allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter. The published data indicates a CVSS v2 base score of 4.3 (Medium) with networ...
CVE-2005-4255
Cross-site scripting XSS vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded phrase parameter...
WikkaWiki XSS vuln.
WikkaWiki XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/wikkawiki-xss-vuln.html vendor:http://wikka.jsnx.com/ affected version:1.1.6.0 and prior Product Description: WikkaWiki is a lightweight and flexible wiki engine allowing easy...
WikkaWiki 1.1.6 - TextSearch.php Cross-Site Scripting
WikkaWiki 1.1.6 - TextSearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15860/info WikkaWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...
WikkaWiki 1.1.6 - 'TextSearch.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15860/info WikkaWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...