15 matches found
CVE-2023-44394: Exposure of Sensitive Information to an Unauthorized Actor
MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit 65c44883f which has been included in release...
KC-Wiki 1.0 /simplest/wiki.php 任意文件下载漏洞
No description provided by source...
KC-Wiki 1.0 /minimal/wiki.php 任意文件下载漏洞
No description provided by source...
Igloo <= 0.1.9 (Wiki.php) Remote File Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito,...
CVE-2011-4307: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
CVE-2008-1170: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to 1 minimal/wiki.php and 2 simplest/wiki.php...
SPIP-Agora_1-4-RC1.txt
ToXiC SPIP-Agora1-4-RC1: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: SPIP-Agora1-4-RC1 Sorce Code: http://www.agora.gouv.fr/IMG/zip/SPIP-Agora1-4-RC1.zip Page: Wiki.php Dir : /modules/Wiki/ ExPloit :...
CVE-2006-3399: Undefined Security Weakness
Cross-site scripting XSS vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message, a variant of CVE-2004-1632...
Igloo 0.1.9 - Wiki.php Remote File Inclusion
Igloo 0.1.9 - Wiki.php Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Sata...
Igloo <= 0.1.9 (Wiki.php) Remote File Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito,...
Igloo <= 0.1.9 (Wiki.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications...
Igloo 0.1.9 - 'Wiki.php' Remote File Inclusion
DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed,...
CVE-2005-2887: Undefined Security Weakness
MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to 1 wiki.php, 2 AutoTheme directory, 3 Blocks directory, 4 admin.php, 5 pnadmin.php, or 6 Topics directory, which reveal the path in an error message...
CVE-2004-1632
Cross-site scripting XSS vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php...
CVE-2004-1632: Undefined Security Weakness
Cross-site scripting XSS vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php...