CVE-2011-4448

SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL commands via the defaultcommentdisplay parameter in an update action...

PT-2012-1882

Name of the Vulnerable Software and Affected Versions WikkaWiki versions 1.3.1 through 1.3.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the default comment display parameter in an update action in the actions/usersettings/usersettings.php...

CVE-2011-4448: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL commands via the defaultcommentdisplay parameter in an update action...