Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache wicket 1.4.18 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-0047
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x prior to 1.4.20 allows remote malicious users to inject arbitrary web script or HTML via the wicket:pageMapName parameter.
Apache Wicket 1.4.1Apache Wicket 1.4.2Apache Wicket 1.4.9Apache Wicket 1.4.10Apache Wicket 1.4.18Apache Wicket 1.4.19Apache Wicket 1.4.3Apache Wicket 1.4.4Apache Wicket 1.4.11Apache Wicket 1.4.12Apache Wicket 1.4.0Apache Wicket 1.4.7Apache Wicket 1.4.8Apache Wicket 1.4.16Apache Wicket 1.4.17Apache Wicket 1.4.5Apache Wicket 1.4.6Apache Wicket 1.4.13Apache Wicket 1.4.14Apache Wicket 1.4.15
NA
CVE-2012-1089
Directory traversal vulnerability in Apache Wicket 1.4.x prior to 1.4.20 and 1.5.x prior to 1.5.5 allows remote malicious users to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package.
Apache Wicket 1.4.3Apache Wicket 1.4.4Apache Wicket 1.4.11Apache Wicket 1.4.12Apache Wicket 1.4.5Apache Wicket 1.4.6Apache Wicket 1.4.13Apache Wicket 1.4.14Apache Wicket 1.4.1Apache Wicket 1.4.2Apache Wicket 1.4.9Apache Wicket 1.4.10Apache Wicket 1.4.18Apache Wicket 1.4.19Apache Wicket 1.4.0Apache Wicket 1.4.7Apache Wicket 1.4.8Apache Wicket 1.4.15Apache Wicket 1.4.16Apache Wicket 1.4.17Apache Wicket 1.5.0Apache Wicket 1.5.1
NA
CVE-2012-3373
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x prior to 1.4.21 and 1.5.x prior to 1.5.8 allows remote malicious users to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app.
Apache Wicket 1.4.3Apache Wicket 1.4.4Apache Wicket 1.4.5Apache Wicket 1.4.13Apache Wicket 1.4.20Apache Wicket 1.4.19Apache Wicket 1.4.7Apache Wicket 1.4.15Apache Wicket 1.4.11Apache Wicket 1.4.12Apache Wicket 1.4.9Apache Wicket 1.4.8Apache Wicket 1.4.16Apache Wicket 1.4.17Apache Wicket 1.4.10Apache Wicket 1.4.1Apache Wicket 1.4.2Apache Wicket 1.4.6Apache Wicket 1.4.14Apache Wicket 1.4.18Apache Wicket 1.5.1Apache Wicket 1.5.0
6.1
CVSSv3
CVE-2012-5636
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x prior to 1.4.22, 1.5.x prior to 1.5.10, and 6.x prior to 6.4.0 might allow remote malicious users to inject arbitrary web script or HTML via vectors related to <script> tags in a rendered response.
Apache Wicket 6.1.1Apache Wicket 6.1.0Apache Wicket 6.0.0Apache Wicket 1.5.0Apache Wicket 1.4.3Apache Wicket 1.4.4Apache Wicket 1.4.5Apache Wicket 1.4.6Apache Wicket 1.4.20Apache Wicket 1.4.21Apache Wicket 1.5.5Apache Wicket 1.5.6Apache Wicket 1.5.7Apache Wicket 1.5.8Apache Wicket 1.4.12Apache Wicket 1.4.13Apache Wicket 1.4.14Apache Wicket 1.4.15Apache Wicket 6.2.0Apache Wicket 1.5.1Apache Wicket 1.5.3Apache Wicket 1.4.0
NA
CVE-2013-2055
Unspecified vulnerability in Apache Wicket 1.4.x prior to 1.4.23, 1.5.x prior to 1.5.11, and 6.x prior to 6.8.0 allows remote malicious users to obtain sensitive information via vectors that cause raw HTML templates to be rendered without being processed and reading the informati...
Apache Wicket 1.5.10Apache Wicket 1.5.0Apache Wicket 1.5.1Apache Wicket 1.5.2Apache Wicket 1.4.14Apache Wicket 1.4.15Apache Wicket 1.4.16Apache Wicket 1.4.17Apache Wicket 6.1.1Apache Wicket 6.2.0Apache Wicket 6.3.0Apache Wicket 6.4.0Apache Wicket 6.5.0Apache Wicket 1.5.7Apache Wicket 1.5.8Apache Wicket 1.4.22Apache Wicket 1.4.0Apache Wicket 6.6.0Apache Wicket 6.8.0Apache Wicket 1.5.4Apache Wicket 1.5.6Apache Wicket 1.4.1
NA
CVE-2011-2712
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x prior to 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters.
Apache Wicket 1.4.3Apache Wicket 1.4.4Apache Wicket 1.4.11Apache Wicket 1.4.12Apache Wicket 1.4.1Apache Wicket 1.4.2Apache Wicket 1.4.9Apache Wicket 1.4.10Apache Wicket 1.4.5Apache Wicket 1.4.6Apache Wicket 1.4.13Apache Wicket 1.4.14Apache Wicket 1.4.0Apache Wicket 1.4.7Apache Wicket 1.4.8Apache Wicket 1.4.15Apache Wicket 1.4.16Apache Wicket 1.4.17
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook