CVE-2008-5322

The CVE-2008-5322 vulnerability affects Wysi Wiki Wyg 1.0. An invalid categup parameter to index.php triggers the phpinfo function, allowing remote attackers to obtain system information. The root cause is improper input handling leading to information disclosure through phpinfo. Public reference...

CVE-2008-5323

The CVE-2008-5323 issue affects Wysi Wiki Wyg 1.0, where index.php is vulnerable to Cross-site Scripting (XSS). An attacker can remotely inject arbitrary script/HTML via the s parameter, with a CVSSv2 base score of 4.3 (Medium): confidentiality impact None, integrity impact Partial, availability ...

CVE-2008-3205

CVE-2008-3205 is a directory traversal vulnerability in the Easy-Script Wysi Wiki Wyg 1.0 web app, exploitable via a dot-dot sequence in the c parameter of index.php to read arbitrary files. The NVD entry gives a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no aut...