EUVD-2006-5828

Malware in sbrugna...

EUVD-2006-5827

Malware in sbrugna...

EUVD-2006-5829

Malware in sbrugna...

Speedywiki 2.0/2.1 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20976/info Speedywiki is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include an arbitrary file-upload vulnerability and a...

CVE-2006-5843

Cross-site scripting XSS vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via the showRevisions parameter...

CVE-2006-5844

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the 1 showRevisions and 2 searchText parameters in a index.php, and b a direct request to upload.php without any parameters...

CVE-2006-5845

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1...

CVE-2006-5843

Cross-site scripting XSS vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via the showRevisions parameter...

CVE-2006-5845

The CVE-2006-5845 issue affects Speedywiki 2.0 and is an unrestricted file upload vulnerability in the index.php file. The underlying flaw allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1. A practical remediation from the PT-2006-6519...

CVE-2006-5844

Speedywiki 2.0 is affected. The vulnerability allows remote attackers to disclose the web server’s full path by abusing the showRevisions[] and searchText[] parameters in index.php, and also via a direct request to upload.php with no parameters. This aligns with NVD data and PT Security’s advisor...

CVE-2006-5845

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1...

CVE-2006-5843

This CVE concerns Speedywiki version 2.0, where an XSS flaw exists in index.php via the showRevisions parameter. The vulnerability allows remote attackers to inject arbitrary web script/HTML. No concrete patch/version fix is documented in the provided sources. The PT-2006-6517 entry confirms the ...

CVE-2006-5844

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the 1 showRevisions and 2 searchText parameters in a index.php, and b a direct request to upload.php without any parameters...

PT-2006-6518 · Speedywiki · Speedywiki

Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: The issue allows remote attackers to obtain the full path of the web server. This can be achieved via the showRevisions and searchText parameters in "index.php", and also through a direct request to...

PT-2006-6519 · Speedywiki · Speedywiki

Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: The issue allows remote authenticated users to upload and execute arbitrary PHP code. This is achieved by setting the upload parameter to 1 in the index.php file. Recommendations: For Speedywiki version 2.0...

PT-2006-6517 · Speedywiki · Speedywiki

Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the showRevisions parameter in the "index.php" file. Recommendations: For...

Speedwiki 2.0 Arbitrary File Upload Vulnerability

product :Speedwiki 2.0 vendor site: http://speedywiki.sourceforge.net/ risk:critical a user logged in , can upload a PHP script on the server , by the upload script , there's actually no upload filter on this cms path : /speedywiki/index.php?upload=1 xss get :...

Speedywiki 2.02.1 - Multiple Input Validation Vulnerabilities

Speedywiki 2.02.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/20976/info Speedywiki is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include an arbitrary...

Speedywiki 2.0/2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/20976/info Speedywiki is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include an arbitrary file-upload vulnerability and a cross-site scripting vulnerability. A...