Vulnerabilities

TI-2006-05629 CVE-2006-5845 · GHSA-j7p2-9xp5-vw32

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote…

LOW 32

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01654 Published 2006-11-10 No fix listed CWE-434

TI-2006-05628 CVE-2006-5844 · GHSA-g5hm-w86x-8ff4

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the…

LOW 26

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions[] and (2) searchText[] parameters in (a) index.php, and (b) a direct request to upload.php without any parameters…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01484 Published 2006-11-10 No fix listed

TI-2006-05627 CVE-2006-5843 · GHSA-9hwf-45r6-8h3c

Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote…

LOW 34

Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via the showRevisions parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01888 Published 2006-11-10 No fix listed CWE-79

Vulnerabilities

Filters

Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote…

Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the…

Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote…