Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

ikiwiki ikiwiki 3.1415926 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2009-2944

Incomplete blacklist vulnerability in the teximg plugin in ikiwiki prior to 3.1415926 and 2.x prior to 2.53.4 allows context-dependent malicious users to read arbitrary files via crafted TeX commands.
Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 2.55Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 2.14Ikiwiki Ikiwiki 2.66Ikiwiki Ikiwiki 2.40Ikiwiki Ikiwiki 2.49Ikiwiki Ikiwiki 3.04Ikiwiki Ikiwiki 2.12Ikiwiki Ikiwiki 2.62.1Ikiwiki Ikiwiki 3.01Ikiwiki Ikiwiki 2.50Ikiwiki Ikiwiki 2.31
NA

CVE-2010-1195

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x prior to 2.53.5 and 3.x prior to 3.20100312 allows remote malicious users to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.
Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.20100212Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.14Ikiwiki Ikiwiki 2.40Ikiwiki Ikiwiki 3.20091009Ikiwiki Ikiwiki 2.49Ikiwiki Ikiwiki 3.04Ikiwiki Ikiwiki 2.12Ikiwiki Ikiwiki 3.01Ikiwiki Ikiwiki 3.20100102.3Ikiwiki Ikiwiki 2.50Ikiwiki Ikiwiki 3.1415926Ikiwiki Ikiwiki 2.31Ikiwiki Ikiwiki 2.42
NA

CVE-2012-0220

Multiple cross-site scripting (XSS) vulnerabilities in the meta plugin (Plugin/meta.pm) in ikiwiki prior to 3.20120516 allow remote malicious users to inject arbitrary web script or HTML via the (1) author or (2) authorurl meta tags.
Ikiwiki Ikiwiki 1.20Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 1.5Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 1.47Ikiwiki Ikiwiki 1.43Ikiwiki Ikiwiki 2.55Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.20101129Ikiwiki Ikiwiki 3.20100212Ikiwiki Ikiwiki 1.18Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 1.41Ikiwiki Ikiwiki 1.22Ikiwiki Ikiwiki 1.34.2
NA

CVE-2011-1401

ikiwiki prior to 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS)...
Ikiwiki Ikiwiki 1.20Ikiwiki Ikiwiki 2.8Ikiwiki Ikiwiki 1.5Ikiwiki Ikiwiki 3.07Ikiwiki Ikiwiki 1.47Ikiwiki Ikiwiki 1.43Ikiwiki Ikiwiki 2.55Ikiwiki Ikiwiki 3.14Ikiwiki Ikiwiki 2.53Ikiwiki Ikiwiki 3.14159Ikiwiki Ikiwiki 3.13Ikiwiki Ikiwiki 3.20101129Ikiwiki Ikiwiki 3.20100212Ikiwiki Ikiwiki 1.18Ikiwiki Ikiwiki 3.11Ikiwiki Ikiwiki 2.52Ikiwiki Ikiwiki 3.09Ikiwiki Ikiwiki 3.141Ikiwiki Ikiwiki 2.60Ikiwiki Ikiwiki 1.41Ikiwiki Ikiwiki 1.22Ikiwiki Ikiwiki 1.34.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook