17 matches found
EUVD-2007-0135
Malware in sbrugna...
EUVD-2010-5018
Malware in sbrugna...
CVE-2010-5054
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
JamWiki < 1.1.6 XSS Vulnerability - Active Check
JAMWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JamWiki 1.1.5 - 'num' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52829/info JamWiki is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...
JamWiki 1.1.5 - num Cross-Site Scripting
JamWiki 1.1.5 - num Cross-Site Scripting source: https://www.securityfocus.com/bid/52829/info JamWiki is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
JAMWiki 1.1.4 Cross Site Scripting
Title : JAMWiki 'num' Parameter Cross Site Scripting Vulnerability Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://jamwiki.org/wiki/en/JAMWiki Advisory : http://secpod.org/blog/?p=493 http://secpod.org/advisories/SecPodJamWikiXSSVuln.txt Software : JAMWiki 1.1.4 Date :...
JAMWiki 'message' Parameter Cross Site Scripting Vulnerability
JAMWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-5054
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2010-5054
Cross-site scripting XSS vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2010-5054
CVE-2010-5054 affects JAMWiki before version 0.8.4. It is a cross-site scripting (XSS) vulnerability in the Special:Login page, exploitable via the message parameter to inject arbitrary script/HTML. The CVSS base score is 4.3 (medium) with network attack vector, no confidentiality impact, partial...
CVE-2007-0131
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...
Code injection
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...
CVE-2007-0131
JAMWiki is affected by CVE-2007-0131. The issue is that JAMWiki before 0.5.0 does not properly enforce permissions during moves of topics that are read-only or admin-only, allowing remote attackers to make unauthorized changes to the wiki. The vulnerability is rooted in insufficient permission ch...
CVE-2007-0131
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki...
[SA23634] JAMWiki User Permission Security Issue
TITLE: JAMWiki User Permission Security Issue SECUNIA ADVISORY ID: SA23634 VERIFY ADVISORY: http://secunia.com/advisories/23634/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: JAMWiki 0.x http://secunia.com/product/13152/ DESCRIPTION: A security issue has been report...