EUVD-2011-5210

Malware in sbrugna...

EUVD-2011-5208

Malware in sbrugna...

EUVD-2011-5209

Malware in sbrugna...

CVE-2011-5309

Cross-site scripting XSS vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2011-5310

Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2011-5311

Cross-site request forgery CSRF vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via the datatext parameter...

CVE-2011-5311

Cross-site request forgery CSRF vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via the datatext parameter...

CVE-2011-5310

Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2011-5309

Cross-site scripting XSS vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via the datatext parameter...

Directory traversal

Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2011-5311

CVE-2011-5311 describes a Cross-site request forgery (CSRF) in Wikipad 1.6.0, where requests that modify pages via the data[text] parameter can hijack an administrator’s authenticated session. Affected component: pages.php. Root cause and detailed exploit path are not elaborated beyond the parame...

CVE-2011-5309

CVE-2011-5309 describes a cross-site scripting (XSS) vulnerability in Wikipad 1.6.0, where the vulnerable component is pages.php and the flaw allows remote attackers to inject arbitrary script/HTML via the id parameter. The available references (NVD/Red Hat PRION/CVE List) reiterate the same desc...

CVE-2011-5310

Wikipad 1.6.0 is affected by a directory traversal in pages.php that lets remote attackers read arbitrary files via a .. in the id parameter. The root cause is improper path handling in the PHP script, enabling access to filesystem locations outside the intended directory. Publicly provided refer...

CVE-2011-5311

Cross-site request forgery CSRF vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via the datatext parameter...

CVE-2011-5310

Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

Wikipad 1.6.0 - Cross-Site Scripting HTML Injection Information Disclosure

Wikipad 1.6.0 - Cross-Site Scripting HTML Injection Information Disclosure source: https://www.securityfocus.com/bid/46383/info Wikipad is prone to a cross-site scripting vulnerability, an HTML-injection vulnerability, and an information-disclosure vulnerability. An attacker may leverage these...

HTB22826: Multiple XSS vulnerabilities in Wikipad

Vulnerability ID: HTB22826 Reference: http://www.htbridge.ch/advisory/multiplexssvulnerabilitiesinwikipad.html Product: Wikipad Vendor: Cherry-Design http://www.cherry-software.spb.ru/ Vulnerable Version: 1.6.0 Vendor Notification: 01 February 2011 Vulnerability Type: XSS Cross Site Scripting Ris...

HTB22827: File Content Disclosure in Wikipad

Vulnerability ID: HTB22827 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinwikipad.html Product: Wikipad Vendor: Cherry-Design http://www.cherry-software.spb.ru/ Vulnerable Version: 1.6.0 Vendor Notification: 01 February 2011 Vulnerability Type: File Content Disclosure Risk leve...