Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution

Exploit for php platform in category web applications ?php / ----------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.3 "unserialize" PHP Code Execution ----------------------------------------------------------------- author...........: Egidio Romano aka EgiX...

Fedora 17 : moodle-2.2.3-1.fc17 (2012-8284)

CVE-2012-2353 MSA-12-0024: Hidden information access issue CVE-2012-2354 MSA-12-0025: Personal communication access issue CVE-2012-2355 MSA-12-0026: Quiz capability issue CVE-2012-2356 MSA-12-0027: Question bank capability issues CVE-2012-2357 MSA-12-0028: Insecure authentication issue...

[SECURITY] Fedora 15 Update: ikiwiki-3.20111106-2.fc15

Ikiwiki is a wiki compiler. It converts wiki pages into HTML pages suitable for publishing on a website. Ikiwiki stores pages and history in a revision control system such as Subversion or Git. There are many other features, including support for blogging, as well as a large array of plugins...

Fedora Update for ikiwiki FEDORA-2012-8151

Check for the Version of ikiwiki OpenVAS Vulnerability Test Fedora Update for ikiwiki FEDORA-2012-8151 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Debian DSA-2474-1 : ikiwiki - XSS

Raul Benencia discovered that ikiwiki, a wiki compiler, does not properly escape the author and its URL of certain metadata, such as comments. This might be used to conduct cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Tiki Wiki 5.2 CMS Groupware File Disclosure

File disclosure vulnerability in Tiki Wiki CMS Groupware tiki-jsplugin.php language parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

DEBIAN-CVE-2012-2054

Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the 1 Comment, 2 Document, 3 IssueCategory, 4 MembersController, 5 Message, 6 News, 7 TimeEntry, 8 Version, 9 Wiki, 10 UserPreference, o...

JAMWiki 1.1.4 Cross Site Scripting

Title : JAMWiki 'num' Parameter Cross Site Scripting Vulnerability Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://jamwiki.org/wiki/en/JAMWiki Advisory : http://secpod.org/blog/?p=493 http://secpod.org/advisories/SecPodJamWikiXSSVuln.txt Software : JAMWiki 1.1.4 Date :...

Semantic Enterprise Wiki <= 1.6.0_2 XSS Vulnerability - Active Check

Semantic Enterprise Wiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1212

CVE-2012-1212 concerns a cross-site scripting (XSS) vulnerability in Semantic Enterprise Wiki (SMW+) via the smwfOnSfSetTargetName path in SMW_Initialize.php. Affected versions are SMW+ 1.5.6 and 1.6.0_2 and earlier; the issue is triggered remotely by supplying a crafted target parameter to index...

Tiki Wiki CMS Groupware - url Open Redirection

Tiki Wiki CMS Groupware - url Open Redirection source: https://www.securityfocus.com/bid/52079/info Tiki Wiki CMS Groupware is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...

Tiki Wiki CMS Groupware - 'url' Open Redirection

source: https://www.securityfocus.com/bid/52079/info Tiki Wiki CMS Groupware is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible...

Tiki Wiki CMS Groupware Frame Injection

Exploit Title: Tiki Wiki CMS Groupware Frame Injection Date: 17.02.2012 Author: Sony Software Link: http://info.tiki.org/tiki-index.php Google Dorks: inurl:tiki-featuredlink.php?type= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

AtWiki Cross Site Scripting

Exploit Title: @Wiki Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://atwiki.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wiki-cross-site-scripting.html...

SnipSnap Wiki <= 1.0b3 XSS Vulnerability - Active Check

SnipSnap is prone to a cross-site scripting XSS vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Brainkeeper Enterprise Wiki 'search.php' XSS Vulnerability

Brainkeeper Enterprise Wiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Brainkeeper Enterprise Wiki Cross Site Scripting

Exploit Title: Brainkeeper Enterprise Wiki "search.php" Cross Site Scripting Date: 6.02.2012 Author: Sony Software Link: http://www.brainkeeper.com Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/brainkeeper-enterprise-wiki-searchphp.html...

Tiki Wiki CMS Groupware 8.2 RCE

Tiki Wiki CMS Groupware RCE pregreplace snarfajax.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

DEBIAN-CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...

UBUNTU-CVE-2011-5025

Multiple cross-site scripting XSS vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web script or HTML via 1 the tag parameter to editTag.yaws, 2 the index parameter to showOldPage.yaws, 3 the node parameter to allRefsToMe.yaws, or 4 the text paramete...