CVE-2006-7050

WikkaWiki (Wikka Wiki) prior to 1.1.6.2 contains a Cross‑site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary JavaScript through (1) events in forced links (url parameter) not properly sanitized in formatters/wakka.php and possibly (2) other vectors in wikka.p...

[Full-disclosure] CVSTrac 2.0.0 Denial of Service (DoS) vulnerability

SECURITY ADVISORY ================= Application: CVSTrac Version: 2.0.0 Vulnerability: Denial of Service DoS Identification: CVE-2007-0347 Date: 2007-01-29 12:00 UTC DESCRIPTION ----------- A Denial of Service DoS vulnerability exists in CVSTrac http://www.cvstrac.org/ version 2.0.0, a web-based...

CVE-2007-0308

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...

Cross site scripting

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...

CVE-2007-0308

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...

CVE-2006-6925

Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...

CVE-2006-6925

Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...

CVE-2006-6924

bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sortmode=-98 query string to 1 blogs/listblogs.php, 2 fisheye/index.php, 3 wiki/orphanpages.php, or 4 wiki/listpages.php, which forces a SQL error. NOTE: the fisheye/listgalleries.php vector is already cover...

CVE-2006-6889

CVE-2006-6889 affects FreeStyle Wiki (fswiki) 3.6.2 and earlier. The issue is that sensitive information (including passwords) is stored under the web root with insufficient access control, allowing remote attackers to obtain passwords by directly requesting config/user.dat. The provided document...

CVE-2006-6889

FreeStyle Wiki fswiki 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat...

CVE-2006-6889

FreeStyle Wiki fswiki 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

No description provided by source. fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit:...

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit:...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== FreeStyle Wiki Affected Software: fswiki 3.6.2 = F0under: bd0rk = Greetings: TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat 0day.today 2018-01-09...

FreeStyle Wiki 3.6.2 - 'user.dat' Password Disclosure

fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat The german Hacker bd0rk...

DocuWiki With ImageMagick远程命令执行和拒绝服务漏洞

DocuWiki是一款基于web的WIKI程序。 DocuWiki存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务和命令执行攻击。 问题一是对图像的调整大小处理没有进行限制，可导致拒绝服务攻击。当libGD使用时（默认需要）必须先计算所需RAM，如果没有足够的RAM（一般8到20MB）给php进程使用，那么函数就会放弃。但是如果使用ImageMagick $conf'imconvert'使用时，没有限制存在，允许攻击者利用此特性消耗大量内存，造成拒绝服务攻击。...

WikiWebWeaver Index.PHP任意文件上传漏洞

WikiWebWeaver是一款基于PHP的WIKI程序。 WikiWebWeaver不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞提交任意文件，造成以WEB权限执行。 问题是'index.php'脚本对用户提交的WEB参数缺少过滤，可导致提交任意PHP文件，攻击者借此可以WEB权限执行。 WikiWebWeaver WikiWebWeaver 1 beta 2 http://wikiwebweaver-devel.teuwen.org:8080/wiki/index.php?l=FR&display=QuoiDeNeufFR...

Joomla JD-Wiki Component &lt;= 1.0.2 Remote Include Vulnerability

No description provided by source. JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating documentatio...

Debian DSA-1119-1 : hiki - design flaw

Akira Tanaka discovered a vulnerability in Hiki Wiki, a Wiki engine written in Ruby that allows remote attackers to cause a denial of service via high CPU consumption using by performing a diff between large and specially crafted Wiki pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

jp-wiki.txt

JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating documentation of any kind...