GCVE - cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wikkawiki:wikkawiki:1.1.6.1:*:*:*:*:*:*:*

part: a version: 1.1.6.1 update: *

Vendor	Wikkawiki (`30aebb2b-cb50-58a3-931d-ccded0c3a532`)
Product	Wikkawiki (`b20dd683-7c86-513a-bcdc-6fe86b421db7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/bakoontz/wikkawiki`	purl2cpe	2026-06-01 10:16:14.113016

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5586`	vulnerable	2026-06-08 05:04:52.270499	Details available Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/. Published: 2013-09-25T14:00:00.000Z Updated: 2024-08-06T17:15:21.361Z Open on db.gcve.eu Reference links https://wush.net/trac/wikka/ticket/1152 https://exchange.xforce.ibmcloud.com/vulnerabilities/87013 https://wush.net/trac/wikka/changeset/1896 http://packetstormsecurity.com/files/123196 https://wush.net/trac/wikka/changeset/1900	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2552`	vulnerable	2026-06-08 04:49:45.262315	Details available The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of private pages via RSS feeds. Published: 2007-05-09T10:00:00.000Z Updated: 2024-08-07T13:42:33.408Z Open on db.gcve.eu Reference links http://www.attrition.org/pipermail/vim/2007-May/001607.html http://www.vupen.com/english/advisories/2007/1725 http://wikkawiki.org/WikkaReleaseNotes http://www.securityfocus.com/bid/23894 http://wush.net/trac/wikka/ticket/305	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7049`	vulnerable	2026-06-08 04:49:30.229642	Details available The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files. Published: 2007-02-24T00:00:00.000Z Updated: 2024-08-07T20:50:05.971Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/27226 http://wikkawiki.org/WikkaReleaseNotes http://www.vupen.com/english/advisories/2006/2381 http://secunia.com/advisories/20628 http://www.securityfocus.com/bid/18484	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Wikkawiki

Notes

PURL mappings

Vulnerability references

Contribute