jspwiki jspwiki 2.5.139 beta vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote malicious users to inject arbitrary web script or HTML via the editor parameter, a different vector than CVE-2007-5120.b.

Jspwiki Jspwiki 2.5.139 Beta Jspwiki Jspwiki 2.4.104 Jspwiki Jspwiki 2.5.139

1 EDB exploit

Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote malicious users to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an "entry page."

Jspwiki Jspwiki 2.5.139 Beta Jspwiki Jspwiki 2.4.104 Jspwiki Jspwiki 2.5.139

1 EDB exploit

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote malicious users to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter.

Jspwiki Jspwiki 2.5.139 Beta Jspwiki Jspwiki 2.4.104 Jspwiki Jspwiki 2.5.139

1 EDB exploit

JSPWiki 2.4.103 and 2.5.139-beta allows remote malicious users to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/.

Jspwiki Jspwiki 2.4.103 Jspwiki Jspwiki 2.5.139-beta

Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote malicious users to inject arbitrary web script or HTML via the (1) group and (2) members parameters in (a) NewGroup.jsp; the (3) edittime parameter in (b) Edit.jsp; the (4) editti...

Jspwiki Jspwiki 2.4.103 Jspwiki Jspwiki 2.5.139-beta

6 EDB exploits

Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-beta allows remote malicious users to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components.

Jspwiki Jspwiki 2.5.139-beta

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook