WikkaWiki 1.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:wikkawiki:wikkawiki:1.3.1:*:*:*:*:*:*:*part: a version: 1.3.1 update: *
| Vendor | Wikkawiki (30aebb2b-cb50-58a3-931d-ccded0c3a532) |
|---|---|
| Product | Wikkawiki (b20dd683-7c86-513a-bcdc-6fe86b421db7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bakoontz/wikkawiki |
purl2cpe | 2026-06-01 10:16:14.114486 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-5586 |
vulnerable | 2026-06-08 05:04:52.275192 |
Details available
Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.
Published: 2013-09-25T14:00:00.000Z
Updated: 2024-08-06T17:15:21.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4452 |
vulnerable | 2026-06-08 04:59:31.091356 |
Details available
Cross-site request forgery (CSRF) vulnerability in the AdminUsers component in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to hijack the authentication of administrators for requests that remove arbitrary user accounts via a delete operation, as demonstrated by an {{image}} action.
Published: 2012-09-05T20:00:00.000Z
Updated: 2024-09-16T22:46:47.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4451 |
vulnerable | 2026-06-08 04:59:31.091032 |
Details available
libs/Wakka.class.php in WikkaWiki 1.3.1 and 1.3.2, when the spam_logging option is enabled, allows remote attackers to write arbitrary PHP code to the spamlog_path file via the User-Agent HTTP header in an addcomment request. NOTE: the vendor disputes this issue because the rendering of the spamlog_path file never uses the PHP interpreter
Published: 2012-09-05T20:00:00.000Z
Updated: 2024-09-16T20:52:22.310Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4450 |
vulnerable | 2026-06-08 04:59:31.090730 |
Details available
Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to read or delete arbitrary files via a non-initial .. (dot dot) in the file parameter, as demonstrated by the /../../wikka.config.php pathname in a download action.
Published: 2012-09-05T20:00:00.000Z
Updated: 2024-09-16T19:51:52.672Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4449 |
vulnerable | 2026-06-08 04:59:31.090405 |
Details available
actions/files/files.php in WikkaWiki 1.3.1 and 1.3.2, when INTRANET_MODE is enabled, supports file uploads for file extensions that are typically absent from an Apache HTTP Server TypesConfig file, which makes it easier for remote attackers to execute arbitrary PHP code by placing this code in a file whose name has multiple extensions, as demonstrated by a (1) .mm or (2) .vpp file.
Published: 2012-09-05T20:00:00.000Z
Updated: 2024-09-16T20:21:27.928Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4448 |
vulnerable | 2026-06-08 04:59:31.089365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.