Cross-site Scripting (XSS)

Apache JSPWiki is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient sanitization of wiki markup and markdown header link creation because specially crafted input can execute JavaScript in the victim’s browser, enabling theft of sensitive information...

Apache JSPWiki 安全漏洞

Apache JSPWiki is an open source WikiWiki engine built on Java, Servlet and JSP from the Apache USA Foundation. A security vulnerability exists in Apache JSPWiki that stems from a failure to properly handle requests when creating header links, which could lead to the execution of arbitrary...

TutorialCMS <= 1.01 Authentication Bypass Vulnerability

No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...