CVE-2006-0983

CVE-2006-0983 affects QwikiWiki version 1.4, specifically the index.php page, with a cross-site scripting (XSS) flaw exploitable via the page parameter. The underlying issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts indicate XSS risk, but no explicit remed...

CVE-2005-0283

CVE-2005-0283 describes a directory traversal in QWikiwiki’s index.php that allows remote attackers to read arbitrary files by crafting the page parameter with a .. and a %00 terminator. The vulnerability stems from insufficient validation of the page parameter, enabling traversal to the file sys...

CVE-2006-0699

CVE-2006-0699 concerns a cross-site scripting (XSS) vulnerability in the web interface of QWikiWiki, specifically in the search.php handler. The affected information states that QWikiWiki 1.5, and possibly 1.5.1 and other versions, are susceptible to injection of arbitrary web script or HTML via ...

CVE-2006-1196

CVE-2006-1196: Affects QwikiWiki 1.5 with multiple XSS vulnerabilities allowing remote injection of scripts via parameters to index.php, login.php, pageindex.php, and recentchanges.php (from, help, action, page, debug, username, password, etc.). Underlying cause is reflected/scriptable input in t...