Show filters
20 Total Results
Displaying 11-20 of 20
Sort by:
Attacker Value
Unknown
CVE-2015-3346
Disclosure Date: April 21, 2015 (last updated October 05, 2023)
SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-6047
Disclosure Date: February 25, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-0220
Disclosure Date: May 29, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
0
Attacker Value
Unknown
CVE-2011-1401
Disclosure Date: April 11, 2011 (last updated October 04, 2023)
ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.
0
Attacker Value
Unknown
CVE-2010-1195
Disclosure Date: March 31, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
0
Attacker Value
Unknown
CVE-2009-2944
Disclosure Date: August 31, 2009 (last updated October 04, 2023)
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
0
Attacker Value
Unknown
CVE-2008-0169
Disclosure Date: June 03, 2008 (last updated October 04, 2023)
Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty password during the login sequence.
0
Attacker Value
Unknown
CVE-2008-0165
Disclosure Date: April 21, 2008 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) preferences and (2) edit forms.
0
Attacker Value
Unknown
CVE-2008-0809
Disclosure Date: February 19, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title contents.
0
Attacker Value
Unknown
CVE-2008-0808
Disclosure Date: February 19, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script or HTML via meta tags.
0
