CVE-2015-2793 | Medium | 6.1 | 2019-11-21 | Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script… |
CVE-2010-1673 | Medium | 6.1 | 2019-10-30 | A cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a comment. |
CVE-2011-1408 | High | 8.2 | 2019-10-29 | ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks. |
CVE-2011-0428 | Medium | 6.1 | 2019-10-29 | Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments. |
CVE-2019-9187 | High | 7.5 | 2019-06-05 | ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading local files via fi… |
CVE-2017-0356 | Critical | 9.8 | 2018-04-13 | A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass… |
CVE-2016-9646 | Medium | 5.3 | 2018-04-13 | ikiwiki before 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can… |
CVE-2016-9645 | Medium | 6.5 | 2018-04-10 | The fix for ikiwiki for CVE-2016-10026 was incomplete resulting in editing restriction bypass for git revert when using git versions older than 2.8.0. This has… |
CVE-2016-10026 | High | 7.5 | 2017-02-13 | ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI… |
CVE-2016-4561 | Medium | 6.1 | 2016-05-10 | Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web s… |
CVE-2012-0220 | | | 2012-05-29 | Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary… |
CVE-2011-1401 | | | 2011-04-11 | ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remo… |
CVE-2010-1195 | | | 2010-03-31 | Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject… |
CVE-2009-2944 | | | 2009-08-31 | Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary… |
CVE-2008-0169 | | | 2008-06-03 | Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account fo… |
CVE-2008-0165 | | | 2008-04-21 | Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the (1) pre… |
CVE-2008-0809 | | | 2008-02-19 | Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script or HTML via title… |
CVE-2008-0808 | | | 2008-02-19 | Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script or HTML via meta ta… |