EUVD-2008-5300

Malware in sbrugna...

EUVD-2013-1074

Malware in sbrugna...

EUVD-2010-1410

Malware in sbrugna...

EUVD-2006-3375

Malware in sbrugna...

EUVD-2020-5591

Malware in sbrugna...

EUVD-2018-1463

Malware in sbrugna...

EUVD-2008-5409

Malware in sbrugna...

EUVD-2008-0013

Malware in sbrugna...

EUVD-2020-5571

Malware in sbrugna...

EUVD-2006-2107

Malware in sbrugna...

EUVD-2006-4066

Malware in sbrugna...

EUVD-2005-1801

Malware in sbrugna...

EUVD-2021-11382

Malware in sbrugna...

EUVD-2021-25753

Malware in sbrugna...

EUVD-2006-2963

Malware in sbrugna...

EUVD-2019-4053

Malware in sbrugna...

XWiki Platform is vulnerable to HQL injection via wiki and space search REST API

Impact The REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can b...

GHSA-GPRP-H92G-GC2H XWiki Platform is vulnerable to HQL injection via wiki and space search REST API

Impact The REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can b...

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

CVE-2025-52472 XWiki Platform vulnerable to HQL injection via wiki and space search REST API

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is...