Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wikkawiki HIGH 7.5
CVE-2011-4448

SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL co…

Patch available
Fix from $1,950 2012-09-05
Wikkawiki MEDIUM 6.8
CVE-2011-4449

actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically abs…

Patch available
Fix from $1,600 2012-09-05
Wikkawiki MEDIUM 6.8
CVE-2011-4452

Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authen…

Patch available
Fix from $1,600 2012-09-05
Wikkawiki MEDIUM 6.4
CVE-2011-4450EPSS 7%

Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to read or delete arbitrar…

Patch available
Fix from $1,600 2012-09-05
Wikkawiki HIGH 8.3
CVE-2007-2613

WikkaWiki (Wikka Wiki) before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration f…

Fix: after 1.1.6.2
Fix from $1,950 2007-05-11
Wikkawiki HIGH 7.5
CVE-2007-2612

SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to execute arbitrary SQL command…

Fix: after 1.1.6.2
Fix from $1,950 2007-05-11
Wikkawiki MEDIUM 5.0
CVE-2007-2552

The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates…

Fix: after 1.1.6.2
Fix from $1,600 2007-05-09
Wikkawiki HIGH 7.5
CVE-2006-7049

The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote …

Patch available
Fix from $1,950 2007-02-24
Wikkawiki MEDIUM 6.8
CVE-2006-7050

Cross-site scripting (XSS) vulnerability in WikkaWiki (Wikka Wiki) before 1.1.6.2 allows remote attackers to inject arbitrary javascript via (1) even…

Fix: after 1.1.6.1
Fix from $1,600 2007-02-24