CVE-2012-1019

Multiple cross-site scripting XSS vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 XWiki.XWikiCommentscomment parameter to xwiki/bin/commentadd/Main/WebHome, 2 XWiki.XWikiUsers0company parameter when editing a user profile, or 3...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 XWiki.XWikiCommentscomment parameter to xwiki/bin/commentadd/Main/WebHome, 2 XWiki.XWikiUsers0company parameter when editing a user profile, or 3...

CVE-2012-1019

CVE-2012-1019 affects XWiki Enterprise 3.4 with multiple cross-site scripting (XSS) vulnerabilities. The three defined vectors are: (1) XWiki.XWikiComments_comment parameter to xwiki/bin/commentadd/Main/WebHome, (2) XWiki.XWikiUsers_0_company parameter when editing a user profile, and (3) project...

CVE-2012-1019

Multiple cross-site scripting XSS vulnerabilities in XWiki Enterprise 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 XWiki.XWikiCommentscomment parameter to xwiki/bin/commentadd/Main/WebHome, 2 XWiki.XWikiUsers0company parameter when editing a user profile, or 3...

XWiki Enterprise 3.4 Cross Site Scripting

Exploit Title: XWiki Cross Site Scripting Date: 4.02.2012 Author: Sony Software Link: http://www.xwiki.org/ Software Version: XWiki Enterprise 3.4 Google Dorks: inurl:xwiki/bin/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

XWiki Enterprise Unspecified SQL Injection and XSS Vulnerabilities

The host is running XWiki Enterprise and is prone to unspecified SQL injection and cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikienterprisemultvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ XWiki Enterprise Unspecified SQL Injection and XSS Vulnerabilities Authors:...

XWiki Detection (HTTP)

HTTP based detection of XWiki. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801840";...

XWiki < 2.5 Unspecified SQLi and XSS Vulnerabilities

XWiki is prone to unspecified SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

XWiki Watch Multiple Cross Site Scripting Vulnerabilities

XWiki Watch is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XWiki Watch Multiple Cross Site Scripting Vulnerabilities

This host is running XWiki Watch and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikiwatchmultxssvuln.nasl 7276 2017-09-26 11:59:52Z cfischer $ XWiki Watch Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c...

CVE-2010-4640

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

CVE-2010-4641

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4642

Cross-site scripting XSS vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

CVE-2010-4641

CVE-2010-4641 : The XWiki Enterprise vulnerability is an SQL injection in XWiki Enterprise before 2.5 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Multiple connected sources corroborate a similar issue affecting XWiki

CVE-2010-4642

Cross-site scripting XSS vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-4642

CVE-2010-4642 concerns XWiki Enterprise

CVE-2010-4640

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...