PmWiki < 2.1.21 Global Variables Overwriting

The version of PmWiki installed on the remote host contains a programming flaw in 'pmwiki.php' that may allow an unauthenticated remote attacker to overwrite global variables used by the application, which could in turn be exploited to execute arbitrary PHP code on the affected host, subject to t...

PmWiki 2.1.19 - Zend_Hash_Del_Key_Or_Index Remote Command Execution

PmWiki 2.1.19 - ZendHashDelKeyOrIndex Remote Command Execution !/usr/bin/php -q -d shortopentag=on -------------------------------------------------------------------------------- '; die; errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5...

PmWiki 2.1.19 - 'Zend_Hash_Del_Key_Or_Index' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on -------------------------------------------------------------------------------- '; die; errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function quickdump$string $result='';$exa='';$cont=0; fo...

PmWiki <= 2.1.19 (Zend_Hash_Del_Key_Or_Index) Remote Exploit

Exploit for unknown platform in category web applications ============================================================ PmWiki -------------------------------...

CVE-2006-4453

Cross-site scripting XSS vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups"...

CVE-2006-4453

Cross-site scripting XSS vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups"...

CVE-2006-4453

PmWiki before 2.1.18 contains a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving “table markups.” The issue is documented under CVE-2006-4453 with a CVSS v2 base score of 4.3 (Medium) and an attack vecto...

CVE-2006-4453: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups"...

[SA21667] PmWiki Table Markups Script Insertion Vulnerability

TITLE: PmWiki Table Markups Script Insertion Vulnerability SECUNIA ADVISORY ID: SA21667 VERIFY ADVISORY: http://secunia.com/advisories/21667/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PmWiki 2.x http://secunia.com/product/6195/ DESCRIPTION: A...

CVE-2006-2840

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2006-2840

CVE-2006-2840 is an XSS vulnerability in PmWiki 2.1.6 and earlier, affecting the uploads.php and the "url links" functionality. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, with a CVSS base score of 6.8 (MEDIUM). Affected software: PmWiki

CVE-2006-2840

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2006-2840: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 uploads.php and 2 "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

PmWiki < 2.1 beta 21 Multiple Vulnerabilities

The remote host is running PmWiki, an open source Wiki written in PHP. The version of PmWiki installed on the remote host allows attackers to overwrite global variables if run under PHP 5 with 'registerglobals' enabled. For example, an attacker can exploit this issue to overwrite the 'FarmD'...

Cross site scripting

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

CVE-2006-0479

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

CVE-2006-0479

The CVE covers PmWiki 2.1 beta 20 (and vulnerable up to 2.1 beta 21) where enabling PHP register_globals lets remote attackers bypass protections by setting a GPC variable and a GLOBALS[] with the same name. This causes GLOBALS[] to be unset while the GPC variable remains, enabling issues such as...

CVE-2006-0479

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...

CVE-2006-0479: Undefined Security Weakness

pmwiki.php in PmWiki 2.1 beta 20, with registerglobals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS variable with the same name, which causes PmWiki to unset the GLOBALS variable but not the GPC...