Rezultati pretraživanja za 'Proizvođač: yeswiki'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-46350 | 3.5 | YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to ta | 2025-05-09 13:57:36 | 2025-04-29 18:15:44 |
| CVE-2025-46349 | 7.6 | YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file upload form. This vulnerability allows any malicious unauthenticated user to create a link that can be clicked on by the victim to per | 2025-05-09 13:56:42 | 2025-04-29 18:15:44 |
| CVE-2025-46347 | 9.8 | YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki vulnerable to remote code execution. An arbitrary file write can be used to write a file with a PHP extension, which then can be browsed to in order to execute arbitrary code on | 2025-05-09 13:56:01 | 2025-04-29 18:15:44 |
| CVE-2025-46346 | 5.4 | YesWiki is a wiki system written in PHP. Prior to version 4.5.4, a stored cross-site scripting (XSS) vulnerability was discovered in the application’s comments feature. This issue allows a malicious actor to inject JavaScript payloads that are stored | 2025-05-09 13:53:56 | 2025-04-29 16:15:36 |
| CVE-2021-43091 | 5.0 | An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form. | 2022-03-29 18:40:00 | 2022-03-25 17:15:00 |
| CVE-2018-1000641 | 7.5 | YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information. | 2020-08-24 17:37:00 | 2018-08-20 19:31:00 |
| CVE-2018-13045 | 7.5 | SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter. | 2019-01-09 13:03:00 | 2019-01-02 18:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: