Speedywiki

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Speedywiki records in CISA KEV

No Speedywiki vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Speedywiki 3 records LOW

Records

3 records

TI-2006-05627 CVE-2006-5843 · GHSA-9hwf-45r6-8h3c

Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote…

LOW 34

Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via the showRevisions parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01888 Published 2006-11-10 No fix listed CWE-79

TI-2006-05629 CVE-2006-5845 · GHSA-j7p2-9xp5-vw32

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote…

LOW 32

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01654 Published 2006-11-10 No fix listed CWE-434

TI-2006-05628 CVE-2006-5844 · GHSA-g5hm-w86x-8ff4

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the…

LOW 26

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions[] and (2) searchText[] parameters in (a) index.php, and (b) a direct request to upload.php without any parameters…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01484 Published 2006-11-10 No fix listed

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0