2292 matches found
CVE-2006-3379
Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...
CVE-2006-3379
The CVE-2006-3379 entry concerns Hiki Wiki: versions 0.6.0–0.6.5 and 0.8.0–0.8.5 are vulnerable to an algorithmic complexity DoS when a remote attacker triggers largest-case CPU usage by diffing large, crafted pages. The underlying issue is a denial of service caused by CPU consumption, with no o...
CVE-2006-3379: Undefined Security Weakness
Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...
CVE-2006-3380: Undefined Security Weakness
Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...
CVE-2006-3257
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
CVE-2006-3257
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
CVE-2006-3257: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
CVE-2006-2966
Cross-site scripting XSS vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element with an extraneous IMG tag and a STYLE attribute that contains "//" comment sequences, which bypasses the XSS protection scheme...
CVE-2006-2966
Particle Soft Particle Wiki 1.0.2 is documented as having an XSS vulnerability where a BR tag containing an extraneous IMG tag and a STYLE attribute with a "/**/" sequence can bypass the XSS protection scheme, allowing remote attackers to inject arbitrary web script or HTML. The available sources...
CVE-2006-2966: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element with an extraneous IMG tag and a STYLE attribute that contains "//" comment sequences, which bypasses the XSS protection scheme...
Sql injection
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter...
CVE-2006-2861
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter...
CVE-2006-2861
Particle Wiki is vulnerable to an SQL injection in index.php for version 1.0.2 and earlier, due to improper sanitization of user input before SQL queries. The OpenVAS entries detail that exploitation could allow data access or modification and potential compromise of the underlying database. The ...
CVE-2006-2861
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter...
CVE-2006-2861: Undefined Security Weakness
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Particle Wiki 1.0.2 - SQL Injection
Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Particle Wiki 1.0.2 - SQL Injection
Particle Wiki 1.0.2 - SQL Injection Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Particle Wiki = 1.0.2 version Remote SQL Injection Vulnerability =================================================================== Particle wiki = 1.0.2 Remote...
Igloo 0.1.9 and prior [(text_wiki mod)] - Remote File Include Vulnerabilities
DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed,...