CVE-2010-4641

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4642

Cross-site scripting XSS vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4640

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

Cross site scripting

Cross-site scripting XSS vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

CVE-2010-4641

CVE-2010-4641 : The XWiki Enterprise vulnerability is an SQL injection in XWiki Enterprise before 2.5 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Multiple connected sources corroborate a similar issue affecting XWiki

CVE-2010-4640

XWiki Watch 1.0 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities. The issues arise from user-supplied input in the rev parameter for bin/viewrev/Main/WebHome and bin/view/Blog, and in the register_first_name/register_last_name parameters for bin/register/XWiki/Register. Impact d...

CVE-2010-4642

Cross-site scripting XSS vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4640

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

CVE-2010-4641

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4642

CVE-2010-4642 concerns XWiki Enterprise

CVE-2010-4640: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

PT-2010-5604

Name of the Vulnerable Software and Affected Versions XWiki Watch version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the rev parameter to API endpoints such as "bin/viewrev/Main/WebHome" and "bin/view/Blog", and the register...

CVE-2010-4641: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2010-5605

Name of the Vulnerable Software and Affected Versions XWiki Enterprise versions prior to 2.5 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue...

CVE-2010-4642: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2010-5606

Name of the Vulnerable Software and Affected Versions XWiki Enterprise versions prior to 2.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue...

Design/Logic Flaw

Unspecified vulnerability in the Multiwiki plugin in XWiki before 1.1 Enterprise RC2 allows remote authenticated users, with administrative access to one wiki in a multiwiki environment, to obtain sensitive information via unknown attack vectors. NOTE: Some of these details are obtained from thir...

CVE-2007-4898

Unspecified vulnerability in the Multiwiki plugin in XWiki before 1.1 Enterprise RC2 allows remote authenticated users, with administrative access to one wiki in a multiwiki environment, to obtain sensitive information via unknown attack vectors. NOTE: Some of these details are obtained from thir...