İçeriğe atla
Noroxi

ikiwiki kayıtları

ikiwiki üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2017-0356
    40Planlayın

    Authentication bypass via repeated parameters

    KritikCVSS 9,8İstismar yokEPSS %3

    ikiwiki · ikiwiki13 Nis 2018

  • CVE-2011-1408
    32İzleyin

    ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks.

    YüksekCVSS 8,2İstismar yokEPSS %1

    ikiwiki · ikiwiki29 Eki 2019

  • CVE-2016-10026
    31İzleyin

    ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges p

    YüksekCVSS 7,5İstismar yokEPSS %2

    ikiwiki · ikiwiki13 Şub 2017

  • CVE-2019-9187
    31İzleyin

    ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin.

    YüksekCVSS 7,5İstismar yokEPSS %1

    ikiwiki · ikiwiki5 Haz 2019

  • CVE-2008-0169
    27İzleyin

    Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and logi

    OrtaCVSS 6,8İstismar yokEPSS %1

    ikiwiki · ikiwiki3 Haz 2008

  • CVE-2016-9645
    26İzleyin

    Editing restriction bypass for git revert

    OrtaCVSS 6,5İstismar yokEPSS %0

    ikiwiki · ikiwiki10 Nis 2018

  • CVE-2015-2793
    25İzleyin

    Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject ar

    OrtaCVSS 6,1İstismar yokEPSS %1

    ikiwiki · ikiwiki21 Kas 2019

  • CVE-2016-4561
    24İzleyin

    Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inj

    OrtaCVSS 6,1İstismar yokEPSS %1

    ikiwiki · ikiwiki10 May 2016

  • CVE-2011-0428
    24İzleyin

    Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient chec

    OrtaCVSS 6,1İstismar yokEPSS %0

    ikiwiki · ikiwiki29 Eki 2019

  • CVE-2010-1673
    24İzleyin

    A cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a

    OrtaCVSS 6,1İstismar yokEPSS %0

    ikiwiki · ikiwiki30 Eki 2019

  • CVE-2009-2944
    21İzleyin

    Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers

    OrtaCVSS 5,0İstismar yokEPSS %1

    ikiwiki · ikiwiki31 Ağu 2009

  • CVE-2016-9646
    21İzleyin

    Commit metadata forgery via CGI::FormBuilder context-dependent APIs

    OrtaCVSS 5,3İstismar yokEPSS %1

    ikiwiki · ikiwiki13 Nis 2018

  • CVE-2012-0220
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki before 3.20120516 allow remote attackers

    OrtaCVSS 4,3İstismar yokEPSS %2

    ikiwiki · ikiwiki29 May 2012

  • CVE-2010-1195
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote

    OrtaCVSS 4,3İstismar yokEPSS %1

    ikiwiki · ikiwiki31 Mar 2010

  • CVE-2008-0808
    17İzleyin

    Cross-site scripting (XSS) vulnerability in the meta plugin in Ikiwiki before 1.1.47 allows remote attackers to inject arbitrary web script

    OrtaCVSS 4,3İstismar yokEPSS %1

    ikiwiki · ikiwiki18 Şub 2008

  • CVE-2008-0809
    17İzleyin

    Cross-site scripting (XSS) vulnerability in the htmlscrubber in Ikiwiki before 1.1.46 allows remote attackers to inject arbitrary web script

    OrtaCVSS 4,3İstismar yokEPSS %1

    ikiwiki · ikiwiki18 Şub 2008

  • CVE-2008-0165
    17İzleyin

    Cross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwor

    OrtaCVSS 4,3İstismar yokEPSS %0

    ikiwiki · ikiwiki21 Nis 2008

  • CVE-2011-1401
    14İzleyin

    ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive

    DüşükCVSS 3,5İstismar yokEPSS %1

    ikiwiki · ikiwiki11 Nis 2011