CVE-2015-2793

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-May/157001.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2015-May/157023.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2015-May/157025.html · Third Party Advisory
• openwall.com/lists/oss-security/2015/03/30/5 · Mailing List
• openwall.com/lists/oss-security/2015/03/31/1 · Mailing List
• source.ikiwiki.branchable.com
• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• ikiwiki.info/bugs/XSS_Alert...__33____33____33__ · Exploit

ikiwiki のその他の脆弱性

• CVE-2010-1673中 6.1A cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a…
• CVE-2011-1408高 8.2ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks.
• CVE-2011-0428中 6.1Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient chec…
• CVE-2019-9187高 7.5ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the aggregate plugin. The impact also includes reading…
• CVE-2017-0356緊急 9.8A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an …