Wikkawiki
13 CVEs across 1 Wikkawiki products. Browse Wikkawiki vulnerabilities, severities, and proof-of-concept exploits.
Wikkawiki products with known CVEs
Wikkawiki CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2013-5586 | | | 2013-09-25 | Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka… |
CVE-2011-4452 | | | 2012-09-05 | Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication o… |
CVE-2011-4451 | | | 2012-09-05 | libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_… |
CVE-2011-4450 | | | 2012-09-05 | Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to read or delete arbitrary files vi… |
CVE-2011-4449 | | | 2012-09-05 | actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from a… |
CVE-2011-4448 | | | 2012-09-05 | SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL commands via… |
CVE-2007-2613 | | | 2007-05-11 | WikkaWiki (Wikka Wiki) before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration file by mod… |
CVE-2007-2612 | | | 2007-05-11 | SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to execute arbitrary SQL commands via the… |
CVE-2007-2552 | | | 2007-05-09 | The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of priva… |
CVE-2007-2551 | | | 2007-05-09 | Cross-site scripting (XSS) vulnerability in usersettings.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to inject arbitrary web script or… |
CVE-2006-7050 | | | 2007-02-24 | Cross-site scripting (XSS) vulnerability in WikkaWiki (Wikka Wiki) before 1.1.6.2 allows remote attackers to inject arbitrary javascript via (1) events in forc… |
CVE-2006-7049 | | | 2007-02-24 | The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers… |
CVE-2005-4255 | | | 2005-12-15 | Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded ph… |