CVE-2006-6889

FreeStyle Wiki fswiki 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

No description provided by source. fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit:...

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit:...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== FreeStyle Wiki Affected Software: fswiki 3.6.2 = F0under: bd0rk = Greetings: TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat 0day.today 2018-01-09...

FreeStyle Wiki 3.6.2 - 'user.dat' Password Disclosure

fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat The german Hacker bd0rk...

CVE-2006-3380

Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380

Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380

CVE-2006-3380 affects FreeStyle Wiki before 3.6.2, where an algorithmic complexity vulnerability allows a remote attacker to cause a denial of service by diffing large, crafted pages to trigger worst-case behavior. The connected JVN entry and NVD record corroborate a DoS via CPU consumption, trig...

FreeStyle Wiki Arbitrary Command Injection Vulnerability

Secunia Advisory: SA16612 Release Date: 2005-08-30 Critical: Moderately critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: FreeStyle Wiki 3.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: A...

CVE-2005-1799

Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.5.7 and WikiLite FSWikiLite .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1799

CVE-2005-1799 describes a cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10. The provided records specify an XSS issue that lets an attacker inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base CVSS v2 score of 4.3 (m...

[SA15538] FreeStyle Wiki Attachments Script Insertion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1799

Cross-site scripting XSS vulnerability in FreeStyle Wiki 3.5.7 and WikiLite FSWikiLite .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

fswiki -- XSS problem in file upload form

A Secunia security advisory reports: A vulnerability has been reported in FreeStyle Wiki and FSWikiLite, which can be exploited by malicious people to conduct script insertion attacks. Input passed in uploaded attachments is not properly sanitised before being used. This can be exploited to injec...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 is affected; a remote attacker can trigger a denial of service by sending a URL request that includes a MS-DOS device name (for example, GET /aux HTTP/1.0). The available sources do not provide hardware/versions beyond the affected product/...

CVE-2001-0615

The CVE-2001-0615 entry describes a directory traversal in Faust Informatics Freestyle Chat server prior to 4.1 SR3. The flaw allows a remote attacker to read arbitrary files by sending a specially crafted URL that abuses variations of the dot-dot sequence (for example, ... or ....). The availabl...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name e.g., GET /aux HTTP/1.0...

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name e.g., GET /aux HTTP/1.0...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...