WebWork

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

WebWork records in CISA KEV

No WebWork vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webwork 2 records LOW Program Generation Language 1 record LOW

Records

4 records

TI-2006-06373 CVE-2006-6629 · GHSA-7qq7-gh46-3q87

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1…

LOW 35

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary mac…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0123 Published 2006-12-18 No fix listed

TI-2006-00432 CVE-2006-0446 · GHSA-4wwc-5xpr-v7cw

Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged…

LOW 35

Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03162 Published 2006-01-27 No fix listed

TI-2006-02747 CVE-2006-2839 · GHSA-crfj-4hvq-7qmv

Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in…

LOW 32

Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates dir…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01764 Published 2006-06-06 No fix listed

TI-2025-27112 CVE-2025-40642 · GHSA-4jcr-hvqv-jqh7

Reflected Cross-Site Scripting (XSS) in WebWork

LOW 24

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00515 Published 2025-09-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0