Rezultati pretraživanja za 'Proizvođač: yeswiki'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-52277 | 6.1 | Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field | 2026-07-05 02:16:54 | 2025-09-09 15:15:33 |
| CVE-2026-34598 | 6.1 | YesWiki is a wiki system written in PHP. Prior to version 4.6.0, a stored and blind XSS vulnerability exists in the form title field. A malicious attacker can inject JavaScript without any authentication via a form title that is saved in the backend | 2026-04-10 15:58:29 | 2026-04-02 18:16:31 |
| CVE-2024-51478 | 9.9 | YesWiki is a wiki system written in PHP. Prior to 4.4.5, the use of a weak cryptographic algorithm and a hard-coded salt to hash the password reset key allows it to be recovered and used to reset the password of any account. This issue is fixed in 4. | 2025-05-09 14:06:43 | 2024-10-31 17:15:13 |
| CVE-2025-24017 | 7.6 | YesWiki is a wiki system written in PHP. Versions up to and including 4.4.5 are vulnerable to any end-user crafting a DOM based XSS on all of YesWiki's pages which is triggered when a user clicks on a malicious link. The vulnerability makes use of th | 2025-05-09 14:05:15 | 2025-01-21 16:15:15 |
| CVE-2025-24019 | 7.1 | YesWiki is a wiki system written in PHP. In versions up to and including 4.4.5, it is possible for any authenticated user, through the use of the filemanager to delete any file owned by the user running the FastCGI Process Manager (FPM) on the host w | 2025-05-09 14:04:35 | 2025-01-21 18:15:17 |
| CVE-2025-31131 | 8.6 | YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2. | 2025-05-09 14:04:06 | 2025-04-01 15:16:07 |
| CVE-2025-24018 | 7.6 | YesWiki is a wiki system written in PHP. In versions up to and including 4.4.5, it is possible for an authenticated user with rights to edit/create a page or comment to trigger a stored XSS which will be reflected on any page where the resource is lo | 2025-05-09 14:02:53 | 2025-01-21 17:15:16 |
| CVE-2025-46550 | 4.3 | YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` endpoint and `idformulaire` parameter are vulnerable to cross-site scripting. An attacker can use a reflected cross-site scripting attack to steal cookies from an authenti | 2025-05-09 13:59:35 | 2025-04-29 21:15:52 |
| CVE-2025-46549 | 4.3 | YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookies from an authenticated user by having them click on a malicious link. Stolen cookies allow the attacker to ta | 2025-05-09 13:59:06 | 2025-04-29 21:15:52 |
| CVE-2025-46348 | 10.0 | YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the request to commence a site backup can be performed and downloaded without authentication. The archives are created with a predictable filename, so a malicious user could create and | 2025-05-09 13:58:53 | 2025-04-29 21:15:52 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: