jspwiki jspwiki 2.5.139-beta vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote malicious users to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter.

Jspwiki Jspwiki 2.5.139 Beta Jspwiki Jspwiki 2.4.104 Jspwiki Jspwiki 2.5.139

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote malicious users to inject arbitrary web script or HTML via the editor parameter, a different vector than CVE-2007-5120.b.

Jspwiki Jspwiki 2.5.139 Beta Jspwiki Jspwiki 2.4.104 Jspwiki Jspwiki 2.5.139

1 EDB exploit

Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote malicious users to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an "entry page."

Jspwiki Jspwiki 2.5.139 Beta Jspwiki Jspwiki 2.4.104 Jspwiki Jspwiki 2.5.139

1 EDB exploit

JSPWiki 2.4.103 and 2.5.139-beta allows remote malicious users to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/.

Jspwiki Jspwiki 2.4.103 Jspwiki Jspwiki 2.5.139-beta

Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-beta allows remote malicious users to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components.

Jspwiki Jspwiki 2.5.139-beta

Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote malicious users to inject arbitrary web script or HTML via the (1) group and (2) members parameters in (a) NewGroup.jsp; the (3) edittime parameter in (b) Edit.jsp; the (4) editti...

Jspwiki Jspwiki 2.4.103 Jspwiki Jspwiki 2.5.139-beta

6 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook