Search criteria

5 vulnerabilities found for Hiki by Hiki Development Team

JVNDB-2005-000779

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00
Severity ?
() - -
Summary
Hiki cross-site scripting vulnerability
Details
Hiki, a Wiki clone from the Hiki development team, contains a cross-site scripting vulnerability.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000779.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "Hiki, a Wiki clone from the Hiki development team, contains a cross-site scripting vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000779.html",
  "sec:cpe": {
    "#text": "cpe:/a:hiki:hiki",
    "@product": "Hiki",
    "@vendor": "Hiki Development Team",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2005-000779",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN38138980/index.html",
      "@id": "JVN#38138980",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2803",
      "@id": "CVE-2005-2803",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2005-2803",
      "@id": "CVE-2005-2803",
      "@source": "NVD"
    },
    {
      "#text": "http://www.securityfocus.com/bid/15021",
      "@id": "15021",
      "@source": "BID"
    }
  ],
  "title": "Hiki cross-site scripting vulnerability"
}

JVNDB-2007-000476

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00
Severity ?
() - -
Summary
Hiki arbitrary file deletion vulnerability
Details
Hiki, a Wiki clone software developed by Hiki Development Team, contains a vulnerability that allows a remote attacker to delete arbitrary files. Hiki contains a vulnerability that allows an arbitrary file to be deleted on a server running Hiki. This is caused by the improper handling of a session management file.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000476.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "Hiki, a Wiki clone software developed by Hiki Development Team, contains a vulnerability that allows a remote attacker to delete arbitrary files.\r\n\r\nHiki contains a vulnerability that allows an arbitrary file to be deleted on a server running Hiki. This is caused by the improper handling of a session management file.",
  "link": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000476.html",
  "sec:cpe": {
    "#text": "cpe:/a:hiki:hiki",
    "@product": "Hiki",
    "@vendor": "Hiki Development Team",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "2.6",
    "@severity": "Low",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2007-000476",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN05187780/index.html",
      "@id": "JVN#05187780",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2836",
      "@id": "CVE-2007-2836",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2836",
      "@id": "CVE-2007-2836",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/25764",
      "@id": "SA25764",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/24603",
      "@id": "24603",
      "@source": "BID"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2007/2304",
      "@id": "FrSIRT/ADV-2007-2304",
      "@source": "FRSIRT"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-22",
      "@title": "Path Traversal(CWE-22)"
    }
  ],
  "title": "Hiki arbitrary file deletion vulnerability"
}

JVNDB-2005-000771

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00
Severity ?
() - -
Summary
Wiki clone cross-site scripting vulnerability
Details
Some Wiki clones contain a vulnerability which could lead to cross-site scripting in their file attachment function. This could allow an attacker to execute an arbitrary script on the browser of a Wiki user.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000771.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "Some Wiki clones contain a vulnerability which could lead to cross-site scripting in their file attachment function. This could allow an attacker to execute an arbitrary script on the browser of a Wiki user.",
  "link": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000771.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:fswiki:wiki",
      "@product": "FreeStyleWiki",
      "@vendor": "FreeStyleWiki Project",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:fswiki:wikilite",
      "@product": "FSWikiLite",
      "@vendor": "FreeStyleWiki Project",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hiki:hiki",
      "@product": "Hiki",
      "@vendor": "Hiki Development Team",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:misc:aswiki",
      "@product": "AsWiki",
      "@vendor": "AsWiki",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:misc:wiki_modoki",
      "@product": "Wiki modoki",
      "@vendor": "Wiki Modoki",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2005-000771",
  "sec:references": {
    "#text": "http://jvn.jp/en/jp/JVN465742E4/index.html",
    "@id": "JVN#465742E4",
    "@source": "JVN"
  },
  "title": "Wiki clone cross-site scripting vulnerability"
}

JVNDB-2005-000780

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00
Severity ?
() - -
Summary
Hiki cross-site scripting vulnerability
Details
Hiki, a Wiki clone from the Hiki development team, contains a cross-site scripting vulnerability.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000780.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "Hiki, a Wiki clone from the Hiki development team, contains a cross-site scripting vulnerability.",
  "link": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000780.html",
  "sec:cpe": {
    "#text": "cpe:/a:hiki:hiki",
    "@product": "Hiki",
    "@vendor": "Hiki Development Team",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2005-000780",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN38138980/index.html",
      "@id": "JVN#38138980",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2336",
      "@id": "CVE-2005-2336",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2005-2336",
      "@id": "CVE-2005-2336",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/17075",
      "@id": "SA17075",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/15021",
      "@id": "15021",
      "@source": "BID"
    }
  ],
  "title": "Hiki cross-site scripting vulnerability"
}

JVNDB-2006-000629

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00
Severity ?
() - -
Summary
Wiki clone products vulnerable to denial of service attacks
Details
Wiki clones allow a user via a web browser to edit documents on the web server. Some products of Wiki clones contain a vulnerability which consumes large amounts of CPU and memory resources when handling a particular request.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000629.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "Wiki clones allow a user via a web browser to edit documents on the web server. Some products of Wiki clones contain a vulnerability which consumes large amounts of CPU and memory resources when handling a particular request.",
  "link": "https://jvndb.jvn.jp/en/contents/2006/JVNDB-2006-000629.html",
  "sec:cpe": {
    "#text": "cpe:/a:hiki:hiki",
    "@product": "Hiki",
    "@vendor": "Hiki Development Team",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2006-000629",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN98836916/index.html",
      "@id": "JVN#98836916",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3379",
      "@id": "CVE-2006-3379",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3379",
      "@id": "CVE-2006-3379",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/20741",
      "@id": "SA20741",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/18785",
      "@id": "18785",
      "@source": "BID"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/27507",
      "@id": "27507",
      "@source": "XF"
    },
    {
      "#text": "http://www.frsirt.com/english/advisories/2006/2643",
      "@id": "FrSIRT/ADV-2006-2643",
      "@source": "FRSIRT"
    },
    {
      "#text": "http://www.osvdb.org/26970",
      "@id": "26970",
      "@source": "OSVDB"
    }
  ],
  "title": "Wiki clone products vulnerable to denial of service attacks"
}