17 matches found
EUVD-2010-5018
Malware in sbrugna...
EUVD-2007-0135
Malware in sbrugna...
CVE-2010-5054
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
JamWiki < 1.1.6 XSS Vulnerability - Active Check
JAMWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JAMWiki 1.1.4 Cross Site Scripting
Title : JAMWiki 'num' Parameter Cross Site Scripting Vulnerability Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://jamwiki.org/wiki/en/JAMWiki Advisory : http://secpod.org/blog/?p=493 http://secpod.org/advisories/SecPodJamWikiXSSVuln.txt Software : JAMWiki 1.1.4 Date :...
JamWiki 1.1.5 - num Cross-Site Scripting
JamWiki 1.1.5 - num Cross-Site Scripting source: https://www.securityfocus.com/bid/52829/info JamWiki is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
JamWiki 1.1.5 - 'num' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52829/info JamWiki is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...
JAMWiki 'message' Parameter Cross Site Scripting Vulnerability
JAMWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-5054
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2010-5054
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2010-5054
CVE-2010-5054 affects JAMWiki before version 0.8.4. It is a cross-site scripting (XSS) vulnerability in the Special:Login page, exploitable via the message parameter to inject arbitrary script/HTML. The CVSS base score is 4.3 (medium) with network attack vector, no confidentiality impact, partial...
Code injection
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...
CVE-2007-0131
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...
CVE-2007-0131
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...
CVE-2007-0131
JAMWiki is affected by CVE-2007-0131. The issue is that JAMWiki before 0.5.0 does not properly enforce permissions during moves of topics that are read-only or admin-only, allowing remote attackers to make unauthorized changes to the wiki. The vulnerability is rooted in insufficient permission ch...
[SA23634] JAMWiki User Permission Security Issue
TITLE: JAMWiki User Permission Security Issue SECUNIA ADVISORY ID: SA23634 VERIFY ADVISORY: http://secunia.com/advisories/23634/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: JAMWiki 0.x http://secunia.com/product/13152/ DESCRIPTION: A security issue has been report...