Vulnerabilities

TI-2010-04385 CVE-2010-4662 · GHSA-xg94-r739-55h8

PmWiki before 2.2.21 has XSS.

LOW 29

PmWiki before 2.2.21 has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00849 Published 2020-02-05 Fixed in 2.2.21 CWE-79

TI-2011-03856 CVE-2011-4453 · GHSA-w4rg-9v64-h6w4

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows…

HIGH 65

The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive, leading to unintende…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.51981 Published 2011-12-22 No fix listed CWE-94

TI-2010-04471 CVE-2010-4748 · GHSA-8rv8-h9fh-8g7j

Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0127 Published 2011-03-01 No fix listed CWE-79

TI-2010-01434 CVE-2010-1481 · GHSA-3j4m-97f8-qmph

Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows…

LOW 18

Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00869 Published 2010-05-11 No fix listed CWE-79

TI-2006-04301 CVE-2006-4453 · GHSA-47h6-r92h-qgwj

Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers…

LOW 22

Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups".

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0118 Published 2006-08-30 No fix listed

TI-2006-02748 CVE-2006-2840 · GHSA-772j-g7pw-69xq

Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki…

LOW 33

Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01309 Published 2006-06-06 No fix listed

TI-2006-00465 CVE-2006-0479 · GHSA-m9qx-8wqh-76q8

pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers…

LOW 26

pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS[] variable with the s…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03101 Published 2006-01-31 No fix listed

TI-2005-03643 CVE-2005-3849 · GHSA-8936-69h8-q4jw

Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12…

LOW 24

Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject arbitrary web script or HTML via the q parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02038 Published 2005-11-27 No fix listed

Vulnerabilities

Filters