CVE-2018-1000641

概要

参考情報

• 0dd.zone/2018/08/05/YesWiki-Object-Injection · Third Party Advisory
• YesWiki/yeswiki · Issue Tracking

yeswiki のその他の脆弱性

• CVE-2026-34598中 6.1YesWiki is a wiki system written in PHP. Prior to version 4.6.0, a stored and blind XSS vulnerability exists in the form title field. A mali…
• CVE-2025-52277中 6.1Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta co…
• CVE-2025-46550中 6.1YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` endpoint and `idformulaire` parameter are vulnerable to cross…
• CVE-2025-46549中 6.1YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting attack to steal cookie…
• CVE-2025-46348緊急 9.8YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the request to commence a site backup can be performed and downloaded witho…