CVE-2026-52763: Improper Neutralization of Special Elements used in an SQL Command

YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the recentchanges action actions/recentchanges.php accepts a period argument from two disjoint parameter spaces. A whitelist validates only the URL form against 'day','week','month'. The action-argument form takes the else branch wi...

EUVD-2011-4265

Malware in sbrugna...

CVE-2011-4333

Multiple cross-site scripting XSS vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 from parameter to index.php or the 2 pageno parameter to recentchanges.php...

CVE-2011-4333

Multiple cross-site scripting XSS vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 from parameter to index.php or the 2 pageno parameter to recentchanges.php...

CVE-2011-4333: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 from parameter to index.php or the 2 pageno parameter to recentchanges.php...

PT-2017-5001

Name of the Vulnerable Software and Affected Versions: LabWiki versions 1.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the from parameter to "index.php" or the page no parameter to "recentchanges.php". Recommendation...

QwikiWiki 1.4/1.5 recentchanges.php help Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17064/info QwikiWiki is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Cross site scripting

Cross-site scripting XSS vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter...

CVE-2006-2850: Undefined Security Weakness

Cross-site scripting XSS vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 from and 2 help parameters to a index.php; 3 action, 4 page, 5 debug, 6 help, 7 username, or 8 password parameters to b login.php; the 7 help parameter to c...

CVE-2006-1196: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 from and 2 help parameters to a index.php; 3 action, 4 page, 5 debug, 6 help, 7 username, or 8 password parameters to b login.php; the 7 help parameter to c...