CVE-2011-5310

Wikipad 1.6.0 is affected by a directory traversal in pages.php that lets remote attackers read arbitrary files via a .. in the id parameter. The root cause is improper path handling in the PHP script, enabling access to filesystem locations outside the intended directory. Publicly provided refer...

CVE-2011-5311

CVE-2011-5311 describes a Cross-site request forgery (CSRF) in Wikipad 1.6.0, where requests that modify pages via the data[text] parameter can hijack an administrator’s authenticated session. Affected component: pages.php. Root cause and detailed exploit path are not elaborated beyond the parame...

CVE-2011-5309

CVE-2011-5309 describes a cross-site scripting (XSS) vulnerability in Wikipad 1.6.0, where the vulnerable component is pages.php and the flaw allows remote attackers to inject arbitrary script/HTML via the id parameter. The available references (NVD/Red Hat PRION/CVE List) reiterate the same desc...