Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ikiwiki ikiwiki 2.5 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2008-0169
Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 up to and including 2.47 allows remote malicious users to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty passw...
Ikiwiki Ikiwiki 1.37Ikiwiki Ikiwiki 1.34.1Ikiwiki Ikiwiki 1.34.2Ikiwiki Ikiwiki 1.41Ikiwiki Ikiwiki 1.42Ikiwiki Ikiwiki 1.5Ikiwiki Ikiwiki 1.51Ikiwiki Ikiwiki 2.14Ikiwiki Ikiwiki 2.15Ikiwiki Ikiwiki 2.3Ikiwiki Ikiwiki 2.30Ikiwiki Ikiwiki 2.42Ikiwiki Ikiwiki 1.35Ikiwiki Ikiwiki 1.36Ikiwiki Ikiwiki 1.43Ikiwiki Ikiwiki 1.44Ikiwiki Ikiwiki 2.0Ikiwiki Ikiwiki 2.1Ikiwiki Ikiwiki 2.16Ikiwiki Ikiwiki 2.17Ikiwiki Ikiwiki 2.31Ikiwiki Ikiwiki 2.31.1
4.3
CVSSv2
CVE-2010-1195
Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x prior to 2.53.5 and 3.x prior to 3.20100312 allows remote malicious users to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Ikiwiki Ikiwiki 2.45Ikiwiki Ikiwiki 2.44Ikiwiki Ikiwiki 2.43Ikiwiki Ikiwiki 2.42Ikiwiki Ikiwiki 2.17Ikiwiki Ikiwiki 2.16Ikiwiki Ikiwiki 2.15Ikiwiki Ikiwiki 2.14Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 3.08Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.10Ikiwiki Ikiwiki 3.20091022Ikiwiki Ikiwiki 3.20091023Ikiwiki Ikiwiki 3.20091031Ikiwiki Ikiwiki 3.20091113Ikiwiki Ikiwiki 3.20091202Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 2.51Ikiwiki Ikiwiki 2.50Ikiwiki Ikiwiki 2.5Ikiwiki Ikiwiki 2.31.1
5
CVSSv2
CVE-2009-2944
Incomplete blacklist vulnerability in the teximg plugin in ikiwiki prior to 3.1415926 and 2.x prior to 2.53.4 allows context-dependent malicious users to read arbitrary files via crafted TeX commands.
Ikiwiki Ikiwiki 2.10Ikiwiki Ikiwiki 2.13Ikiwiki Ikiwiki 2.0Ikiwiki Ikiwiki 2.19Ikiwiki Ikiwiki 2.31.3Ikiwiki Ikiwiki 2.3Ikiwiki Ikiwiki 2.4Ikiwiki Ikiwiki 2.7Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.1415Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.08Ikiwiki Ikiwiki 2.72Ikiwiki Ikiwiki 2.71Ikiwiki Ikiwiki 2.64Ikiwiki Ikiwiki 2.63Ikiwiki Ikiwiki 2.54Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 2.6.1Ikiwiki Ikiwiki 2.00Ikiwiki Ikiwiki 2.11
4.3
CVSSv2
CVE-2012-0220
Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki prior to 3.20120516 allow remote malicious users to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
Ikiwiki Ikiwiki 1.20Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 1.5Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 1.47Ikiwiki Ikiwiki 1.43Ikiwiki Ikiwiki 2.55Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.20101129Ikiwiki Ikiwiki 3.20100212Ikiwiki Ikiwiki 1.18Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 1.41Ikiwiki Ikiwiki 1.22Ikiwiki Ikiwiki 1.34.2
3.5
CVSSv2
CVE-2011-1401
ikiwiki prior to 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS)...
Ikiwiki Ikiwiki 2.19Ikiwiki Ikiwiki 2.18Ikiwiki Ikiwiki 3.1415Ikiwiki Ikiwiki 3.10Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 3.12Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 2.64Ikiwiki Ikiwiki 2.65Ikiwiki Ikiwiki 2.62.1Ikiwiki Ikiwiki 3.02Ikiwiki Ikiwiki 3.01Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.08Ikiwiki Ikiwiki 2.31.3Ikiwiki Ikiwiki 2.43Ikiwiki Ikiwiki 2.42Ikiwiki Ikiwiki 2.44Ikiwiki Ikiwiki 2.48Ikiwiki Ikiwiki 2.49Ikiwiki Ikiwiki 2.54Ikiwiki Ikiwiki 2.55
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook