Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the 1 text, 2 FirstName, 3 LastName, 4 OrganisationName, 5 OrganisationUrl, 6 Profession, 7 Country, 8...

CVE-2012-1004

Multiple cross-site scripting XSS vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the 1 text, 2 FirstName, 3 LastName, 4 OrganisationName, 5 OrganisationUrl, 6 Profession, 7 Country, 8...

CVE-2012-1004

Foswiki CVE-2012-1004 describes multiple XSS vulnerabilities in UI/Register.pm affecting Foswiki before 1.1.5. The issue allows remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via parameters such as text, FirstName, LastName, OrganisationName, Organisation...

PT-2012-3008

Name of the Vulnerable Software and Affected Versions Foswiki versions prior to 1.1.5 Description The issue allows remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via various parameters, including text, FirstName, LastName, OrganisationName, OrganisationUr...

CVE-2012-1004: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE privileges to inject arbitrary web script or HTML via the 1 text, 2 FirstName, 3 LastName, 4 OrganisationName, 5 OrganisationUrl, 6 Profession, 7 Country, 8...

Foswiki Cross Site Scripting

Exploit Title: Foswiki Cross Site Scripting Date: 2.02.2012 Author: Sony Software Link: http://foswiki.org/ Google Dorks: intext:powered by foswiki Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/foswiki-cross-site-scripting.html...

CVE-2010-4215

UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup...

Design/Logic Flaw

UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup...

CVE-2010-4215

Foswiki 1.1.0 and 1.1.1 are affected by CVE-2010-4215. The flaw resides in UI/Manage.pm, allowing remote authenticated users to escalate privileges by altering the GROUP and ALLOWTOPICCHANGE settings in Main.AdminGroup topic preferences. Evidence from multiple scanners/advisories confirms remote ...

CVE-2010-4215

UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup...

PT-2010-5363

Name of the Vulnerable Software and Affected Versions Foswiki versions 1.1.0 through 1.1.1 Description The issue allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup. Recommendations For versions...

CVE-2010-4215: Undefined Security Weakness

UI/Manage.pm in Foswiki 1.1.0 and 1.1.1 allows remote authenticated users to gain privileges by modifying the GROUP and ALLOWTOPICCHANGE preferences in the topic preferences for Main.AdminGroup...

CVE-2009-4853

Multiple cross-site scripting XSS vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4853

CVE-2009-4853 describes multiple cross-site scripting (XSS) vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System. The data states remote attackers can inject arbitrary web script or HTML via unspecified vectors. The NVD entry provides a CVSS v2 base score of 4.3 (Medium) with impact: c...

CVE-2009-4853

Multiple cross-site scripting XSS vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4853: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in JumpBox before 1.1.2 for Foswiki Wiki System allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Foswiki CSRF Vulnerability

Foswiki is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Foswiki Version Detection

Detection of Foswiki. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...