CVE-2007-1405: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2006-7049

CVE-2006-7049 affects WikkaWiki prior to 1.1.6.2. The Method() in wikka.php calls strstr and strrpos with arguments in the wrong order, which can bypass access restrictions and allow remote attackers to access arbitrary PHP files. Public references also describe it as a local file inclusion vulne...

CVE-2006-7050

WikkaWiki (Wikka Wiki) prior to 1.1.6.2 contains a Cross‑site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary JavaScript through (1) events in forced links (url parameter) not properly sanitized in formatters/wakka.php and possibly (2) other vectors in wikka.p...

[Full-disclosure] CVSTrac 2.0.0 Denial of Service (DoS) vulnerability

SECURITY ADVISORY ================= Application: CVSTrac Version: 2.0.0 Vulnerability: Denial of Service DoS Identification: CVE-2007-0347 Date: 2007-01-29 12:00 UTC DESCRIPTION ----------- A Denial of Service DoS vulnerability exists in CVSTrac http://www.cvstrac.org/ version 2.0.0, a web-based...

CVE-2007-0308

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...

Cross site scripting

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...

CVE-2007-0308

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...

CVE-2007-0308: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.3.4 beta allows remote attackers to inject arbitrary web script or HTML via Wiki Page titles...

CVE-2006-6925

Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...

CVE-2006-6924

bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sortmode=-98 query string to 1 blogs/listblogs.php, 2 fisheye/index.php, 3 wiki/orphanpages.php, or 4 wiki/listpages.php, which forces a SQL error. NOTE: the fisheye/listgalleries.php vector is already cover...

CVE-2006-6925

Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...

CVE-2006-6925: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...

CVE-2006-6889

FreeStyle Wiki fswiki 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat...

CVE-2006-6889

CVE-2006-6889 affects FreeStyle Wiki (fswiki) 3.6.2 and earlier. The issue is that sensitive information (including passwords) is stored under the web root with insufficient access control, allowing remote attackers to obtain passwords by directly requesting config/user.dat. The provided document...

CVE-2006-6889: Undefined Security Weakness

FreeStyle Wiki fswiki 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat...

CVE-2006-6889

FreeStyle Wiki fswiki 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

No description provided by source. fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit:...

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit:...

FreeStyle Wiki <= 3.6.2 (user.dat) Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== FreeStyle Wiki Affected Software: fswiki 3.6.2 = F0under: bd0rk = Greetings: TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat 0day.today 2018-01-09...

FreeStyle Wiki 3.6.2 - 'user.dat' Password Disclosure

fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat The german Hacker bd0rk...