Wikkawiki: >> Wikkawiki >> 1.1.6.1 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.
CVSS Score
4.3
EPSS Score
0.01
Published
2013-09-25
The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and possibly revision notes and dates, of private pages via RSS feeds.
CVSS Score
5.0
EPSS Score
0.006
Published
2007-05-09
The Method method in WikkaWiki (Wikka Wiki) before 1.1.6.2 calls the strstr and strrpos functions with the wrong argument order, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files.
CVSS Score
7.5
EPSS Score
0.005
Published
2007-02-24