Webwork

4 CVEs across 3 Webwork products. Browse Webwork vulnerabilities, severities, and proof-of-concept exploits.

Webwork products with known CVEs

ProductCVEs
Webwork2
Program Generation Language1
Webwork Php Script1
Webwork CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-406422025-09-08Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request par…
CVE-2006-66292006-12-18lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid…
CVE-2006-28392006-06-06Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote a…
CVE-2006-04462006-01-27Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack v…