22 matches found
EUVD-2006-3395
Malware in sbrugna...
EUVD-2004-1626
Malware in sbrugna...
EUVD-2004-1539
Malware in sbrugna...
MoniWiki 1.0/1.1 Wiki.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11516/info MoniWiki is reported prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied URI input before including it in dynamic web page content. This issue could permit a remote...
MoniWiki <= 1.1.5 'login_id' XSS Vulnerability - Active Check
MoniWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MoniWiki Cross Site Scripting
Exploit Title: MoniWiki Cross Site Scripting Date: 17.02.2012 Author: Sony Software Link: http://moniwiki.kldp.net/wiki.php Google Dorks: inurl:EnUserPreferences intext:moniwiki Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...
CVE-2006-3399
Cross-site scripting XSS vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message, a variant of CVE-2004-1632...
CVE-2006-3399
Cross-site scripting XSS vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message, a variant of CVE-2004-1632...
CVE-2006-3399
Summary (CVE-2006-3399) : A cross‑site scripting (XSS) flaw in MoniWiki’s wiki.php affects releases prior to 1.1.2-20060702. An attacker can craft a URL to inject arbitrary JavaScript which is reflected back in an error message. This vulnerability is described as a variant of CVE-2004-1632. Affec...
[Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability
Title: Kil13r-SA-20060701-2 MoniWiki 1.1.1 Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/28 - Discovery 2006/06/28 - Vendor notification 2006/06/30 - Vendor notification 2006/07/01 - Release Affected version: MoniWiki 1.1.1 or...
Kil13r-SA-20060701-2.txt
Title: Kil13r-SA-20060701-2 MoniWiki 1.1.1 Cross-Site Scripting Vulnerability Author: Kil13r - http://www.kil13r.info/ Local / Remote: Remote Timeline: 2006/06/28 - Discovery 2006/06/28 - Vendor notification 2006/06/30 - Vendor notification 2006/07/01 - Release Affected version: MoniWiki 1.1.1 or...
MoniWiki < 1.0.9 XSS Vulnerability - Active Check
MoniWiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2004-1545
The CVE-2004-1545 vulnerability affects MoniWiki (versions 1.0.9.2 and earlier) when used with Apache mod_mime. UploadFile.php fails to properly handle files with two extensions (e.g., .php.hwp), allowing remote attackers to upload and execute arbitrary code. This is triggered by the file-extensi...
CVE-2004-1632
MoniWiki is affected by CVE-2004-1632: a cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier. The issue arises from insufficient validation of arguments to wiki.php, allowing remote attackers to inject arbitrary web script or HTML. Impact: XSS in users’ browsers; ex...
CVE-2004-1632
Cross-site scripting XSS vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php...
CVE-2004-1545
UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache modmime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code...
CVE-2004-1545
UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache modmime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code...
STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki
STG Security Advisory: SSA-20041215-15 Vulnerability of uploading files with multiple extensions in MoniWiki Revision 1.0 Date Published: 2004-12-15 KST Last Update: 2004-12-15 Disclosed by SSR Team [email protected] Summary ======== MoniWiki is a wiki web application used by many Korean...
CVE-2004-1632
Cross-site scripting XSS vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php...
MoniWiki < 1.0.9 wiki.php XSS
The remote host seems to be running MoniWiki, a wiki web application written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through the script 'wiki.php'. With a specially crafted URL, an attacker can cause arbitrary code execution in users' browsers...