Wikyblog@1.7.3 Security Vulnerabilities and Issues — Wikyblog@1.7.3 CVE List

Lucene search

WikyblogWikyblog1.7.3

4 matches found

CVE•added 2010/02/27 12:30 a.m.•39 views

CVE-2010-0754

Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action.

4.3CVSS5.8AI score0.07551EPSS

Web

CVE•added 2010/02/27 12:30 a.m.•39 views

CVE-2010-0757

Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using the uploadform action, then accessing it via a direct request to the file in userfiles/[username]/upload...

6.5CVSS7.6AI score0.04009EPSS

CVE•added 2010/02/27 12:30 a.m.•31 views

CVE-2010-0755

PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langFile parameter.

7.5CVSS7.8AI score0.01643EPSS

Web

CVE•added 2010/02/27 12:30 a.m.•29 views

CVE-2010-0756

Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to (1) index.php/Comment/Main, (2) index.php/Comment/Main/Home_Wiky, or (3) index.php/Edit/Main.

5.8CVSS6.9AI score0.00694EPSS

Web