Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

ikiwiki ikiwiki 2.40 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2

CVE-2008-0169

Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 up to and including 2.47 allows remote malicious users to bypass authentication, and login to any account for which an OpenID identity is configured and a password is not configured, by specifying an empty passw...
Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 1.5Ikiwiki Ikiwiki 1.47Ikiwiki Ikiwiki 1.43Ikiwiki Ikiwiki 1.41Ikiwiki Ikiwiki 1.34.2Ikiwiki Ikiwiki 2.14Ikiwiki Ikiwiki 1.39Ikiwiki Ikiwiki 2.40Ikiwiki Ikiwiki 2.12Ikiwiki Ikiwiki 1.51Ikiwiki Ikiwiki 1.36Ikiwiki Ikiwiki 2.31Ikiwiki Ikiwiki 2.42Ikiwiki Ikiwiki 2.0Ikiwiki Ikiwiki 2.3Ikiwiki Ikiwiki 1.34Ikiwiki Ikiwiki 2.47Ikiwiki Ikiwiki 2.7Ikiwiki Ikiwiki 1.40Ikiwiki Ikiwiki 2.17Ikiwiki Ikiwiki 2.31.2
4.3
CVSSv2

CVE-2010-1195

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x prior to 2.53.5 and 3.x prior to 3.20100312 allows remote malicious users to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.20100212Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.14Ikiwiki Ikiwiki 2.40Ikiwiki Ikiwiki 3.20091009Ikiwiki Ikiwiki 2.49Ikiwiki Ikiwiki 3.04Ikiwiki Ikiwiki 2.12Ikiwiki Ikiwiki 3.01Ikiwiki Ikiwiki 3.20100102.3Ikiwiki Ikiwiki 2.50Ikiwiki Ikiwiki 3.1415926Ikiwiki Ikiwiki 2.31Ikiwiki Ikiwiki 2.42
5
CVSSv2

CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki prior to 3.1415926 and 2.x prior to 2.53.4 allows context-dependent malicious users to read arbitrary files via crafted TeX commands.
Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 2.55Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 2.14Ikiwiki Ikiwiki 2.66Ikiwiki Ikiwiki 2.40Ikiwiki Ikiwiki 2.49Ikiwiki Ikiwiki 3.04Ikiwiki Ikiwiki 2.12Ikiwiki Ikiwiki 2.62.1Ikiwiki Ikiwiki 3.01Ikiwiki Ikiwiki 2.50Ikiwiki Ikiwiki 2.31
4.3
CVSSv2

CVE-2012-0220

Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki prior to 3.20120516 allow remote malicious users to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
Ikiwiki Ikiwiki 1.20Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 1.5Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 1.47Ikiwiki Ikiwiki 1.43Ikiwiki Ikiwiki 2.55Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.20101129Ikiwiki Ikiwiki 3.20100212Ikiwiki Ikiwiki 1.18Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 1.41Ikiwiki Ikiwiki 1.22Ikiwiki Ikiwiki 1.34.2
3.5
CVSSv2

CVE-2011-1401

ikiwiki prior to 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS)...
Ikiwiki Ikiwiki 1.20Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 1.5Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 1.47Ikiwiki Ikiwiki 1.43Ikiwiki Ikiwiki 2.55Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.20101129Ikiwiki Ikiwiki 3.20100212Ikiwiki Ikiwiki 1.18Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 1.41Ikiwiki Ikiwiki 1.22Ikiwiki Ikiwiki 1.34.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusionCVE-2023-38506CVE-2024-37198CVE-2023-45197CVE-2024-38621CVE-2024-30103elevation of privilegeCVE-2024-0044IMAP
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook