2086 matches found
CVE-2017-15577
Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information...
CVE-2014-9489
The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...
VK.com: Хранимая XSS в функционале добавления аудио в WYSIWYG
XSS в Wiki...
[SECURITY] Fedora 25 Update: php-horde-wicked-2.0.8-1.fc25
Wicked is a wiki application for Horde...
[SECURITY] Fedora 27 Update: php-horde-wicked-2.0.8-1.fc27
Wicked is a wiki application for Horde...
[SECURITY] Fedora 26 Update: php-horde-wicked-2.0.8-1.fc26
Wicked is a wiki application for Horde...
CVE-2017-14925
Cross-Site Request Forgery CSRF vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, related to...
Tiki Cross-Site Request Forgery Vulnerability (CNVD-2017-30070)
Tiki is a free, free, open source web application with rich built-in functionality. A cross-site request forgery vulnerability exists in the IMG element of Tiki, which can be exploited by an authenticated user to gain administrator privileges if the administrator opens a Wiki page with the IMG...
Tiki Cross-Site Request Forgery Vulnerability
Tiki is a free, free, open source web application with rich built-in functionality. A cross-site request forgery vulnerability exists in the IMG element of Tiki, which can be exploited by authenticated users to edit global permissions if an administrator opens a Wiki page with the IMG element...
CVE-2017-12979
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution...
UBUNTU-CVE-2017-12979
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php. An attacker can create or edit a wiki with this element to trigger JavaScript execution...
Authorization Bypass
Moodle is vulnerable to authorization bypasses. The attacks exist because mod/wiki/admin.php does not validate deletion parameters properly, allowing the users with deletion capability to at least one Wiki activity in the course to delete other Wiki pages in the same course...
student.wiki.pisd.edu XSS vulnerability
Vulnerable URL: http://student.wiki.pisd.edu/s/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
Tiki Wiki CMS Groupware XSS Vulnerability
Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Tiki Wiki CMS Groupware XSS Vulnerability
Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Authorization Bypass
Moodle is vulnerable to authorization bypass. The attacks can be launched because the verification of the view/edit permissions in students' Wiki pages is insufficient, allowing one student to view and edit anothers' Wiki pages without authorization...
Tiki Wiki CMS Groupware Cross-Site Scripting Vulnerability (CNVD-2017-16010)
Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in the TikiFilter.php file in...
CVE-2017-9145
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS...
