6 matches found
CVE-2019-9187
ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via file: URIs...
CVE-2016-10026
ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI interface enabled, which allows remote attackers to revert certain changes by leveraging permissions to change the page before the revisio...
Security fix for the ALT Linux 6 package ikiwiki version 3.20110328-alt1
April 13, 2011 Vladimir V Kamarzin 3.20110328-alt1 - New version fixes CVE-2011-1401...
CVE-2011-1401
ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting XSS attacks via crafted Cascading Style Sheets CSS token sequences in 1 the default...
CVE-2011-1401
ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting XSS attacks via crafted Cascading Style Sheets CSS token sequences in 1 the default...
ikiwiki Version Detection
This script detects the installed version of ikiwiki and sets the result in KB. OpenVAS Vulnerability Test $Id: gbikiwikidetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ ikiwiki Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Th...