Tiki Wiki CMS Groupware 5.2 - Multiple Vulnerabilities

Tiki Wiki CMS Groupware 5.2 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/43507/info Tiki Wiki CMS Groupware is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can...

Tiki Wiki CMS Groupware 5.2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/43507/info Tiki Wiki CMS Groupware is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using...

Tiki Wiki CMS Groupware 5.2 LFI and XSS Vulnerabilities - Active Check

Tiki Wiki CMS Groupware is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Non-secure content warning in IE8 on the Dashboards screen caused by the wiki renderer

Wiki renderer-generated contents e.g. in the activity stream include references to icons with http prefix that cause IE8 to generate security warnings for JIRA instances accessible via HTTPS. To reproduce it, have contents in the activity stream gadget contain icons included by the wiki renderer,...

Non-secure content warning in IE8 on the Dashboards screen caused by the wiki renderer

Wiki renderer-generated contents e.g. in the activity stream include references to icons with http prefix that cause IE8 to generate security warnings for JIRA instances accessible via HTTPS. To reproduce it, have contents in the activity stream gadget contain icons included by the wiki renderer,...

Non-secure content warning in IE8 on the Dashboards screen caused by the wiki renderer

Wiki renderer-generated contents e.g. in the activity stream include references to icons with http prefix that cause IE8 to generate security warnings for JIRA instances accessible via HTTPS. To reproduce it, have contents in the activity stream gadget contain icons included by the wiki renderer,...

Tiki Wiki CMS Groupware 5.2 Local File Inclusion

------------------------------------------------------------------------ Software................Tiki Wiki CMS Groupware 5.2 Vulnerability...........Local File Inclusion Download................htp://www.tiki.org Release Date............9/24/2010 Tested On...............Windows Vista + XAMPP...

Tiki Wiki CMS Groupware 5.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Tiki Wiki CMS Groupware 5.2 Vulnerability...........Reflected Cross-site Scripting Download................htp://www.tiki.org Release Date............9/24/2010 Tested On...............Windows Vista +...

Tiki Wiki CMS Groupware 5.2 Cross Site Request Forgery

...

Replace unsafe text gadget and add to JIRA Cloud

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-21965. panel panel:title=Atlassian Update - 23 April 2015|borderStyle=solid|borderColor=ebf2f9|titleBGColor=ebf2f9|bgColor=ffffff Hi everyone...

Replace unsafe text gadget and add to JIRA Cloud

panel:title=Atlassian Update - 23 April 2015|borderStyle=solid|borderColor=ebf2f9|titleBGColor=ebf2f9|bgColor=ffffff Hi everyone, There is an add-on from Atlassian Labs that provides a rich text dashboard gadget for JIRA Cloud. You can find it by searching for "rich text gadget" in the Find New...

Replace unsafe text gadget and add to JIRA Cloud

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-21965. panel panel:title=Atlassian Update - 23 April 2015|borderStyle=solid|borderColor=ebf2f9|titleBGColor=ebf2f9|bgColor=ffffff Hi everyon...

Debian DSA-2083-1 : moin - missing input sanitization

It was discovered that moin, a python clone of WikiWiki, does not sufficiently sanitize parameters when passing them to the addmsg function. This allows a remote attackers to conduct cross-site scripting XSS attacks for example via the template parameter. %NASLMINLEVEL 70300 C Tenable Network...

DSA-2083-1 moin - cross-site scripting

Bulletin has no description...

Lion Wiki 3.2.3 Cross Site Scripting

------------------------------------------------------------------------ Software................Lion Wiki 3.2.3 Vulnerability...........Reflected Cross-site Scripting Download................http://lionwiki.0o.cz/ Release Date............7/11/2010 Tested On...............Windows Vista + XAMPP...

Fedora Update for mediawiki FEDORA-2010-10848

Check for the Version of mediawiki OpenVAS Vulnerability Test Fedora Update for mediawiki FEDORA-2010-10848 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 12 Update: mediawiki-1.15.4-54.fc12

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

[SECURITY] Fedora 13 Update: mediawiki-1.15.4-54.fc13

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

[SECURITY] Fedora 12 Update: mediawiki-1.15.3-53.fc12

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Wiki Web Help 'getpage.php' SQL Injection Vulnerability

Wiki Web Help is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...