FreeStyle Wiki 3.6.2 - 'user.dat' Password Disclosure

fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit: http://target/fswikipath/config/user.dat The german Hacker bd0rk...

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure

FreeStyle Wiki 3.6.2 - user.dat Password Disclosure fswiki 3.6.2 user.dat Password Disclosure Vulnerability = Affected Software: fswiki 3.6.2 = Download: http://keihanna.dl.sourceforge.jp/fswiki/20797/wiki362.zip = F0under: bd0rk = Greetings: str0ke, TheJT, SHiKaA, Lu7k +Exploit:...

DocuWiki With ImageMagick远程命令执行和拒绝服务漏洞

DocuWiki是一款基于web的WIKI程序。 DocuWiki存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务和命令执行攻击。 问题一是对图像的调整大小处理没有进行限制，可导致拒绝服务攻击。当libGD使用时（默认需要）必须先计算所需RAM，如果没有足够的RAM（一般8到20MB）给php进程使用，那么函数就会放弃。但是如果使用ImageMagick $conf'imconvert'使用时，没有限制存在，允许攻击者利用此特性消耗大量内存，造成拒绝服务攻击。...

WikiWebWeaver Index.PHP任意文件上传漏洞

WikiWebWeaver是一款基于PHP的WIKI程序。 WikiWebWeaver不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞提交任意文件，造成以WEB权限执行。 问题是'index.php'脚本对用户提交的WEB参数缺少过滤，可导致提交任意PHP文件，攻击者借此可以WEB权限执行。 WikiWebWeaver WikiWebWeaver 1 beta 2 http://wikiwebweaver-devel.teuwen.org:8080/wiki/index.php?l=FR&display=QuoiDeNeufFR...

Joomla JD-Wiki Component <= 1.0.2 Remote Include Vulnerability

No description provided by source. JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating documentatio...

Debian DSA-1119-1 : hiki - design flaw

Akira Tanaka discovered a vulnerability in Hiki Wiki, a Wiki engine written in Ruby that allows remote attackers to cause a denial of service via high CPU consumption using by performing a diff between large and specially crafted Wiki pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

jp-wiki.txt

JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating documentation of any kind...

CVE-2006-4074

PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component comjd-wiki 1.0.2 and earlier for Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4074

CVE-2006-4074 affects the JD-Wiki (com_jd-wiki) Joomla! component (1.0.2 and earlier). The vulnerability is a PHP remote file inclusion in lib/tpl/default/main.php that, when register_globals is enabled, allows an attacker to supply a URL via mosConfig_absolute_path to execute arbitrary PHP on th...

Joomla JD-Wiki Component <= 1.0.2 Remote Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== Joomla JD-Wiki Component = 1.0.2 Remote Include Vulnerability ============================================================== JD-Wiki Remote File Include...

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at...

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion

JD-Wiki Remote File Include ------------------------------------------------------------------------------------ JD-Wiki is the Joomla! integration of the nice DokuWiki. DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating documentation of any kind...

[SECURITY] [DSA 1119-1] New hiki packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1119-1 [email protected] http://www.debian.org/security/ Martin Schulze July 22nd, 2006 http://www.debian.org/security/faq -...

DSA-1119 hiki - design flaw

Bulletin has no description...

[SECURITY] [DSA 1119-1] New hiki packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1119-1 [email protected] http://www.debian.org/security/ Martin Schulze July 22nd, 2006 http://www.debian.org/security/faq -...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

DEBIAN-CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380

Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...