CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 0 Last 7 days 2,628 Total CVEs 401,238 CISA KEV 1,733 Critical 42,400 All stats

Page 1

CVE-2017-7981 HIGH

Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project Wiki component because the proc_open PHP…

CVSS 8.8 EPSS 16.13% Apr 29, 2017

CVE-2014-5519 HIGH

The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] paramet…

CVSS 7.5 EPSS 64.97% Sep 11, 2014

CVE-2007-3193 HIGH

lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authen…

CVSS 10.0 EPSS 3.53% Jun 12, 2007

CVE-2007-2025 HIGH

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files…

CVSS 7.5 EPSS 2.50% Apr 13, 2007

CVE-2007-2024 MEDIUM

Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files wit…

CVSS 6.8 EPSS 3.28% Apr 13, 2007

CVE-2002-1070 HIGH

Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter.

CVSS 7.5 EPSS 2.78% Aug 31, 2002

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2017-7981	Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project Wiki component because the proc_open PHP…	HIGH	8.8	16.13%	Apr 29, 2017
CVE-2014-5519	The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edit[content] paramet…	HIGH	7.5	64.97%	Sep 11, 2014
CVE-2007-3193	lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authen…	HIGH	10.0	3.53%	Jun 12, 2007
CVE-2007-2025	Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files…	HIGH	7.5	2.50%	Apr 13, 2007
CVE-2007-2024	Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files wit…	MEDIUM	6.8	3.28%	Apr 13, 2007
CVE-2002-1070	Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter.	HIGH	7.5	2.78%	Aug 31, 2002

Rows per page

Showing 1 to 6 CVEs · page 1