Lucene search
+L

40 matches found

CNVD
CNVD
added 2019/07/09 12:0 a.m.7 views

Wikindx Cross-Site Scripting Vulnerability

Wikindx is a suite of virtual research environments online bibliography and quote/notes management and article creation system. A cross-site scripting vulnerability exists in the noMenu and noSubMenu in the core/navigation/MENU.php file in WIKINDX versions prior to 5.8.1. The vulnerability stems...

6.1CVSS6.4AI score0.01141EPSS
Exploits0References1
NVD
NVD
added 2019/07/08 8:15 p.m.16 views

CVE-2019-12930

A cross-site scripting XSS vulnerability in noMenu and noSubMenu in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter...

6.1CVSS6AI score0.01141EPSS
Exploits0References3
OSV
OSV
added 2019/07/08 8:15 p.m.6 views

CVE-2019-12930

A cross-site scripting XSS vulnerability in noMenu and noSubMenu in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter...

6.1CVSS6.4AI score0.01141EPSS
Exploits0References3
CVE
CVE
added 2019/07/08 7:20 p.m.62 views

CVE-2019-12930

WIKINDX is affected by a cross-site scripting (XSS) vulnerability in core/navigation/MENU.php (noMenu() and noSubMenu()) prior to version 5.8.1. The issue stems from inadequate validation of client-side data via the method parameter, enabling remote attackers to inject arbitrary web script or HTM...

6.1CVSS5.9AI score0.01141EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/07/08 7:20 p.m.23 views

CVE-2019-12930

A cross-site scripting XSS vulnerability in noMenu and noSubMenu in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter...

6AI score0.01141EPSS
Exploits0References3
CNVD
CNVD
added 2019/03/27 12:0 a.m.3 views

WIKINDX Cross-Site Scripting Vulnerability

Wikindx is a suite of virtual research environments online bibliography and quote/notes management and article creation system. A cross-site scripting vulnerability exists in Wikindx versions prior to 5.7.0, which stems from a lack of proper validation of client-side data by the WEB application. ...

6.1CVSS6.4AI score0.00809EPSS
Exploits0References1
NVD
NVD
added 2019/03/26 7:29 p.m.17 views

CVE-2019-9961

A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

6.1CVSS6AI score0.00809EPSS
Exploits0References2
OSV
OSV
added 2019/03/26 7:29 p.m.3 views

CVE-2019-9961

A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

6.1CVSS6.4AI score0.00809EPSS
Exploits0References2
Prion
Prion
added 2019/03/26 7:29 p.m.20 views

Cross site scripting

A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

4.3CVSS5.9AI score0.00809EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/03/26 6:45 p.m.42 views

CVE-2019-9961

The vulnerability CVE-2019-9961 affects Wikindx prior to version 5.7.0, specifically an XSS flaw in the ressource view (core/modules/resource/RESOURCEVIEW.php) that allows an attacker to inject arbitrary script/HTML through the id parameter. Impact is limited to client-side script execution per t...

6.1CVSS5.9AI score0.00809EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/03/26 6:45 p.m.20 views

CVE-2019-9961

A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

6AI score0.00809EPSS
Exploits0References2
0day.today
0day.today
added 2018/10/03 12:0 a.m.26 views

Wikindx 5.3.2 Multiple Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wikindx 5.3.2 Multiple Cross-Site Scripting Exploit Author: Seccops https://seccops.com Vendor Homepage: http://wikindx.sourceforge.net/ Software Link: https://sourceforge.net/projects/wikindx/files/latest/download Version: 5.3....

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/02/01 12:0 a.m.26 views

Wikindx 5.2.1 Cross Site Scripting

============================================================================================================================ | Title : Wikindx5.2.1 xss Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : windows 10 FranASSais V.Pro | | | Vendor : http://www.wikindx.com/...

7.1AI score
Exploits0
Prion
Prion
added 2007/06/19 9:30 p.m.12 views

Code injection

Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capabilities via unknown vectors...

10CVSS7AI score0.01541EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2007/06/19 9:30 p.m.13 views

CVE-2007-3277

Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capabilities via unknown vectors...

10CVSS6.5AI score0.01541EPSS
Exploits0References5
CVE
CVE
added 2007/06/19 9:0 p.m.35 views

CVE-2007-3277

CVE-2007-3277 relates to an unspecified vulnerability in the localization before 1.2 module for WIKINDX . The available connected records confirm the affected component as the localization module prior to version 1.2, with an attack vector described as unknown and capable of allowing an attacker ...

10CVSS6.5AI score0.01541EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2007/06/19 9:0 p.m.20 views

CVE-2007-3277

Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capabilities via unknown vectors...

6.5AI score0.01541EPSS
Exploits0References5
CVE
CVE
added 2005/10/25 4:0 a.m.42 views

CVE-2004-2506

CVE-2004-2506 affects WIKINDX prior to 0.9.9g. The vulnerability is an unparsed web content delivery flaw that allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file. The available sources describe the impact as information disclosure (partial con...

5CVSS6.5AI score0.01388EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2005/10/25 4:0 a.m.18 views

CVE-2004-2506

Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file...

6.1AI score0.01388EPSS
Exploits0References4
NVD
NVD
added 2004/12/31 5:0 a.m.18 views

CVE-2004-2506

Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file...

5CVSS6.1AI score0.01388EPSS
Exploits0References4
Rows per page
Query Builder