Search criteria
9 vulnerabilities found for wikidocs by wikidocs
FKIE_CVE-2025-7887
Vulnerability from fkie_nvd - Published: 2025-07-20 12:15 - Updated: 2025-09-15 18:40
Severity ?
4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Summary
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
References
| URL | Tags | ||
|---|---|---|---|
| cna@vuldb.com | https://github.com/Zavy86/WikiDocs/issues/256 | Exploit, Issue Tracking, Third Party Advisory | |
| cna@vuldb.com | https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458 | Exploit, Issue Tracking, Third Party Advisory | |
| cna@vuldb.com | https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777 | Exploit, Issue Tracking | |
| cna@vuldb.com | https://vuldb.com/?ctiid.317002 | Permissions Required, VDB Entry | |
| cna@vuldb.com | https://vuldb.com/?id.317002 | Third Party Advisory, VDB Entry | |
| cna@vuldb.com | https://vuldb.com/?submit.609063 | Exploit, Third Party Advisory, VDB Entry | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://github.com/Zavy86/WikiDocs/issues/256 | Exploit, Issue Tracking, Third Party Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458 | Exploit, Issue Tracking, Third Party Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777 | Exploit, Issue Tracking |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wikidocs:wikidocs:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F73AFE7A-2542-4D66-A9B1-3A7C1239B65D",
"versionEndIncluding": "1.0.78",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
},
{
"lang": "es",
"value": "Se ha encontrado una vulnerabilidad en Zavy86 WikiDocs hasta la versi\u00f3n 1.0.78, clasificada como problem\u00e1tica. Esta vulnerabilidad afecta al c\u00f3digo desconocido del archivo template.inc.php. La manipulaci\u00f3n de la ruta de argumentos provoca ataques de Cross-Site Scripting. El ataque puede ejecutarse en remoto. Se ha hecho p\u00fablico el exploit y puede que sea utilizado."
}
],
"id": "CVE-2025-7887",
"lastModified": "2025-09-15T18:40:28.500",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "cna@vuldb.com",
"type": "Secondary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4,
"source": "cna@vuldb.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"cvssMetricV40": [
{
"cvssData": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityRequirement": "NOT_DEFINED",
"exploitMaturity": "PROOF_OF_CONCEPT",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"source": "cna@vuldb.com",
"type": "Secondary"
}
]
},
"published": "2025-07-20T12:15:26.083",
"references": [
{
"source": "cna@vuldb.com",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256"
},
{
"source": "cna@vuldb.com",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458"
},
{
"source": "cna@vuldb.com",
"tags": [
"Exploit",
"Issue Tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777"
},
{
"source": "cna@vuldb.com",
"tags": [
"Permissions Required",
"VDB Entry"
],
"url": "https://vuldb.com/?ctiid.317002"
},
{
"source": "cna@vuldb.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "https://vuldb.com/?id.317002"
},
{
"source": "cna@vuldb.com",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://vuldb.com/?submit.609063"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777"
}
],
"sourceIdentifier": "cna@vuldb.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
],
"source": "cna@vuldb.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2022-23376
Vulnerability from fkie_nvd - Published: 2022-02-19 16:15 - Updated: 2024-11-21 06:48
Severity ?
Summary
WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | https://demo.wikidocs.it/ | Product | |
| cve@mitre.org | https://github.com/Zavy86/WikiDocs | Third Party Advisory | |
| cve@mitre.org | https://github.com/Zavy86/WikiDocs/issues/28 | Issue Tracking, Third Party Advisory | |
| cve@mitre.org | https://wikidocs.it/ | Product | |
| af854a3a-2127-422b-91ae-364da2661108 | https://demo.wikidocs.it/ | Product | |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/Zavy86/WikiDocs | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/Zavy86/WikiDocs/issues/28 | Issue Tracking, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://wikidocs.it/ | Product |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wikidocs:wikidocs:0.1.18:*:*:*:*:*:*:*",
"matchCriteriaId": "089CD7F3-905A-4050-A5BF-3BC1FBCBB92C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages."
},
{
"lang": "es",
"value": "WikiDocs versi\u00f3n 0.1.18, presenta m\u00faltiples vulnerabilidades de tipo XSS reflejadas en diferentes p\u00e1ginas"
}
],
"id": "CVE-2022-23376",
"lastModified": "2024-11-21T06:48:28.593",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-02-19T16:15:17.270",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Product"
],
"url": "https://demo.wikidocs.it/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
},
{
"source": "cve@mitre.org",
"tags": [
"Product"
],
"url": "https://wikidocs.it/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Product"
],
"url": "https://demo.wikidocs.it/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Product"
],
"url": "https://wikidocs.it/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2022-23375
Vulnerability from fkie_nvd - Published: 2022-02-19 16:15 - Updated: 2024-11-21 06:48
Severity ?
Summary
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | https://demo.wikidocs.it/ | Product | |
| cve@mitre.org | https://github.com/Zavy86/WikiDocs | Third Party Advisory | |
| cve@mitre.org | https://github.com/Zavy86/WikiDocs/issues/28 | Exploit, Issue Tracking, Third Party Advisory | |
| cve@mitre.org | https://wikidocs.it/ | Product | |
| af854a3a-2127-422b-91ae-364da2661108 | https://demo.wikidocs.it/ | Product | |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/Zavy86/WikiDocs | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://github.com/Zavy86/WikiDocs/issues/28 | Exploit, Issue Tracking, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://wikidocs.it/ | Product |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wikidocs:wikidocs:0.1.18:*:*:*:*:*:*:*",
"matchCriteriaId": "089CD7F3-905A-4050-A5BF-3BC1FBCBB92C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php."
},
{
"lang": "es",
"value": "WikiDocs versi\u00f3n 0.1.18, presenta una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remoto autenticado. Un atacante puede subir un archivo malicioso usando el formulario de subida de im\u00e1genes mediante el archivo index.php"
}
],
"id": "CVE-2022-23375",
"lastModified": "2024-11-21T06:48:28.437",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-02-19T16:15:14.523",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Product"
],
"url": "https://demo.wikidocs.it/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
},
{
"source": "cve@mitre.org",
"tags": [
"Product"
],
"url": "https://wikidocs.it/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Product"
],
"url": "https://demo.wikidocs.it/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Product"
],
"url": "https://wikidocs.it/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-434"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2025-7887 (GCVE-0-2025-7887)
Vulnerability from cvelistv5 – Published: 2025-07-20 11:44 – Updated: 2025-07-21 13:19
VLAI?
Title
Zavy86 WikiDocs template.inc.php cross site scripting
Summary
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity ?
Assigner
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zavy86 | WikiDocs |
Affected:
1.0.0
Affected: 1.0.1 Affected: 1.0.2 Affected: 1.0.3 Affected: 1.0.4 Affected: 1.0.5 Affected: 1.0.6 Affected: 1.0.7 Affected: 1.0.8 Affected: 1.0.9 Affected: 1.0.10 Affected: 1.0.11 Affected: 1.0.12 Affected: 1.0.13 Affected: 1.0.14 Affected: 1.0.15 Affected: 1.0.16 Affected: 1.0.17 Affected: 1.0.18 Affected: 1.0.19 Affected: 1.0.20 Affected: 1.0.21 Affected: 1.0.22 Affected: 1.0.23 Affected: 1.0.24 Affected: 1.0.25 Affected: 1.0.26 Affected: 1.0.27 Affected: 1.0.28 Affected: 1.0.29 Affected: 1.0.30 Affected: 1.0.31 Affected: 1.0.32 Affected: 1.0.33 Affected: 1.0.34 Affected: 1.0.35 Affected: 1.0.36 Affected: 1.0.37 Affected: 1.0.38 Affected: 1.0.39 Affected: 1.0.40 Affected: 1.0.41 Affected: 1.0.42 Affected: 1.0.43 Affected: 1.0.44 Affected: 1.0.45 Affected: 1.0.46 Affected: 1.0.47 Affected: 1.0.48 Affected: 1.0.49 Affected: 1.0.50 Affected: 1.0.51 Affected: 1.0.52 Affected: 1.0.53 Affected: 1.0.54 Affected: 1.0.55 Affected: 1.0.56 Affected: 1.0.57 Affected: 1.0.58 Affected: 1.0.59 Affected: 1.0.60 Affected: 1.0.61 Affected: 1.0.62 Affected: 1.0.63 Affected: 1.0.64 Affected: 1.0.65 Affected: 1.0.66 Affected: 1.0.67 Affected: 1.0.68 Affected: 1.0.69 Affected: 1.0.70 Affected: 1.0.71 Affected: 1.0.72 Affected: 1.0.73 Affected: 1.0.74 Affected: 1.0.75 Affected: 1.0.76 Affected: 1.0.77 Affected: 1.0.78 |
Credits
Matan Haim Sandori
MatanS (VulDB User)
MatanS (VulDB User)
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-7887",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-07-21T13:19:26.531327Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-07-21T13:19:35.520Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "WikiDocs",
"vendor": "Zavy86",
"versions": [
{
"status": "affected",
"version": "1.0.0"
},
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "1.0.2"
},
{
"status": "affected",
"version": "1.0.3"
},
{
"status": "affected",
"version": "1.0.4"
},
{
"status": "affected",
"version": "1.0.5"
},
{
"status": "affected",
"version": "1.0.6"
},
{
"status": "affected",
"version": "1.0.7"
},
{
"status": "affected",
"version": "1.0.8"
},
{
"status": "affected",
"version": "1.0.9"
},
{
"status": "affected",
"version": "1.0.10"
},
{
"status": "affected",
"version": "1.0.11"
},
{
"status": "affected",
"version": "1.0.12"
},
{
"status": "affected",
"version": "1.0.13"
},
{
"status": "affected",
"version": "1.0.14"
},
{
"status": "affected",
"version": "1.0.15"
},
{
"status": "affected",
"version": "1.0.16"
},
{
"status": "affected",
"version": "1.0.17"
},
{
"status": "affected",
"version": "1.0.18"
},
{
"status": "affected",
"version": "1.0.19"
},
{
"status": "affected",
"version": "1.0.20"
},
{
"status": "affected",
"version": "1.0.21"
},
{
"status": "affected",
"version": "1.0.22"
},
{
"status": "affected",
"version": "1.0.23"
},
{
"status": "affected",
"version": "1.0.24"
},
{
"status": "affected",
"version": "1.0.25"
},
{
"status": "affected",
"version": "1.0.26"
},
{
"status": "affected",
"version": "1.0.27"
},
{
"status": "affected",
"version": "1.0.28"
},
{
"status": "affected",
"version": "1.0.29"
},
{
"status": "affected",
"version": "1.0.30"
},
{
"status": "affected",
"version": "1.0.31"
},
{
"status": "affected",
"version": "1.0.32"
},
{
"status": "affected",
"version": "1.0.33"
},
{
"status": "affected",
"version": "1.0.34"
},
{
"status": "affected",
"version": "1.0.35"
},
{
"status": "affected",
"version": "1.0.36"
},
{
"status": "affected",
"version": "1.0.37"
},
{
"status": "affected",
"version": "1.0.38"
},
{
"status": "affected",
"version": "1.0.39"
},
{
"status": "affected",
"version": "1.0.40"
},
{
"status": "affected",
"version": "1.0.41"
},
{
"status": "affected",
"version": "1.0.42"
},
{
"status": "affected",
"version": "1.0.43"
},
{
"status": "affected",
"version": "1.0.44"
},
{
"status": "affected",
"version": "1.0.45"
},
{
"status": "affected",
"version": "1.0.46"
},
{
"status": "affected",
"version": "1.0.47"
},
{
"status": "affected",
"version": "1.0.48"
},
{
"status": "affected",
"version": "1.0.49"
},
{
"status": "affected",
"version": "1.0.50"
},
{
"status": "affected",
"version": "1.0.51"
},
{
"status": "affected",
"version": "1.0.52"
},
{
"status": "affected",
"version": "1.0.53"
},
{
"status": "affected",
"version": "1.0.54"
},
{
"status": "affected",
"version": "1.0.55"
},
{
"status": "affected",
"version": "1.0.56"
},
{
"status": "affected",
"version": "1.0.57"
},
{
"status": "affected",
"version": "1.0.58"
},
{
"status": "affected",
"version": "1.0.59"
},
{
"status": "affected",
"version": "1.0.60"
},
{
"status": "affected",
"version": "1.0.61"
},
{
"status": "affected",
"version": "1.0.62"
},
{
"status": "affected",
"version": "1.0.63"
},
{
"status": "affected",
"version": "1.0.64"
},
{
"status": "affected",
"version": "1.0.65"
},
{
"status": "affected",
"version": "1.0.66"
},
{
"status": "affected",
"version": "1.0.67"
},
{
"status": "affected",
"version": "1.0.68"
},
{
"status": "affected",
"version": "1.0.69"
},
{
"status": "affected",
"version": "1.0.70"
},
{
"status": "affected",
"version": "1.0.71"
},
{
"status": "affected",
"version": "1.0.72"
},
{
"status": "affected",
"version": "1.0.73"
},
{
"status": "affected",
"version": "1.0.74"
},
{
"status": "affected",
"version": "1.0.75"
},
{
"status": "affected",
"version": "1.0.76"
},
{
"status": "affected",
"version": "1.0.77"
},
{
"status": "affected",
"version": "1.0.78"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Matan Haim Sandori"
},
{
"lang": "en",
"type": "reporter",
"value": "MatanS (VulDB User)"
},
{
"lang": "en",
"type": "analyst",
"value": "MatanS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
},
{
"lang": "de",
"value": "In Zavy86 WikiDocs bis 1.0.78 wurde eine problematische Schwachstelle gefunden. Betroffen ist eine unbekannte Verarbeitung der Datei template.inc.php. Durch Manipulation des Arguments path mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk passieren. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-07-20T11:44:05.636Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-317002 | Zavy86 WikiDocs template.inc.php cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.317002"
},
{
"name": "VDB-317002 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.317002"
},
{
"name": "Submit #609063 | Zavy86 WikiDocs 1.0.77 Cross Site Scripting",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.609063"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-07-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-07-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-07-19T12:45:44.000Z",
"value": "VulDB entry last update"
}
],
"title": "Zavy86 WikiDocs template.inc.php cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-7887",
"datePublished": "2025-07-20T11:44:05.636Z",
"dateReserved": "2025-07-19T08:14:39.991Z",
"dateUpdated": "2025-07-21T13:19:35.520Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-23375 (GCVE-0-2022-23375)
Vulnerability from cvelistv5 – Published: 2022-02-19 15:43 – Updated: 2024-08-03 03:36
VLAI?
Summary
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:36:20.404Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-19T15:43:09",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-23375",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wikidocs.it/",
"refsource": "MISC",
"url": "https://wikidocs.it/"
},
{
"name": "https://demo.wikidocs.it/",
"refsource": "MISC",
"url": "https://demo.wikidocs.it/"
},
{
"name": "https://github.com/Zavy86/WikiDocs",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"name": "https://github.com/Zavy86/WikiDocs/issues/28",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-23375",
"datePublished": "2022-02-19T15:43:09",
"dateReserved": "2022-01-18T00:00:00",
"dateUpdated": "2024-08-03T03:36:20.404Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-23376 (GCVE-0-2022-23376)
Vulnerability from cvelistv5 – Published: 2022-02-19 15:42 – Updated: 2024-08-03 03:36
VLAI?
Summary
WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:36:20.399Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-19T15:42:29",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-23376",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wikidocs.it/",
"refsource": "MISC",
"url": "https://wikidocs.it/"
},
{
"name": "https://demo.wikidocs.it/",
"refsource": "MISC",
"url": "https://demo.wikidocs.it/"
},
{
"name": "https://github.com/Zavy86/WikiDocs",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"name": "https://github.com/Zavy86/WikiDocs/issues/28",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-23376",
"datePublished": "2022-02-19T15:42:29",
"dateReserved": "2022-01-18T00:00:00",
"dateUpdated": "2024-08-03T03:36:20.399Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-7887 (GCVE-0-2025-7887)
Vulnerability from nvd – Published: 2025-07-20 11:44 – Updated: 2025-07-21 13:19
VLAI?
Title
Zavy86 WikiDocs template.inc.php cross site scripting
Summary
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity ?
Assigner
References
| URL | Tags | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Zavy86 | WikiDocs |
Affected:
1.0.0
Affected: 1.0.1 Affected: 1.0.2 Affected: 1.0.3 Affected: 1.0.4 Affected: 1.0.5 Affected: 1.0.6 Affected: 1.0.7 Affected: 1.0.8 Affected: 1.0.9 Affected: 1.0.10 Affected: 1.0.11 Affected: 1.0.12 Affected: 1.0.13 Affected: 1.0.14 Affected: 1.0.15 Affected: 1.0.16 Affected: 1.0.17 Affected: 1.0.18 Affected: 1.0.19 Affected: 1.0.20 Affected: 1.0.21 Affected: 1.0.22 Affected: 1.0.23 Affected: 1.0.24 Affected: 1.0.25 Affected: 1.0.26 Affected: 1.0.27 Affected: 1.0.28 Affected: 1.0.29 Affected: 1.0.30 Affected: 1.0.31 Affected: 1.0.32 Affected: 1.0.33 Affected: 1.0.34 Affected: 1.0.35 Affected: 1.0.36 Affected: 1.0.37 Affected: 1.0.38 Affected: 1.0.39 Affected: 1.0.40 Affected: 1.0.41 Affected: 1.0.42 Affected: 1.0.43 Affected: 1.0.44 Affected: 1.0.45 Affected: 1.0.46 Affected: 1.0.47 Affected: 1.0.48 Affected: 1.0.49 Affected: 1.0.50 Affected: 1.0.51 Affected: 1.0.52 Affected: 1.0.53 Affected: 1.0.54 Affected: 1.0.55 Affected: 1.0.56 Affected: 1.0.57 Affected: 1.0.58 Affected: 1.0.59 Affected: 1.0.60 Affected: 1.0.61 Affected: 1.0.62 Affected: 1.0.63 Affected: 1.0.64 Affected: 1.0.65 Affected: 1.0.66 Affected: 1.0.67 Affected: 1.0.68 Affected: 1.0.69 Affected: 1.0.70 Affected: 1.0.71 Affected: 1.0.72 Affected: 1.0.73 Affected: 1.0.74 Affected: 1.0.75 Affected: 1.0.76 Affected: 1.0.77 Affected: 1.0.78 |
Credits
Matan Haim Sandori
MatanS (VulDB User)
MatanS (VulDB User)
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-7887",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-07-21T13:19:26.531327Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-07-21T13:19:35.520Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "WikiDocs",
"vendor": "Zavy86",
"versions": [
{
"status": "affected",
"version": "1.0.0"
},
{
"status": "affected",
"version": "1.0.1"
},
{
"status": "affected",
"version": "1.0.2"
},
{
"status": "affected",
"version": "1.0.3"
},
{
"status": "affected",
"version": "1.0.4"
},
{
"status": "affected",
"version": "1.0.5"
},
{
"status": "affected",
"version": "1.0.6"
},
{
"status": "affected",
"version": "1.0.7"
},
{
"status": "affected",
"version": "1.0.8"
},
{
"status": "affected",
"version": "1.0.9"
},
{
"status": "affected",
"version": "1.0.10"
},
{
"status": "affected",
"version": "1.0.11"
},
{
"status": "affected",
"version": "1.0.12"
},
{
"status": "affected",
"version": "1.0.13"
},
{
"status": "affected",
"version": "1.0.14"
},
{
"status": "affected",
"version": "1.0.15"
},
{
"status": "affected",
"version": "1.0.16"
},
{
"status": "affected",
"version": "1.0.17"
},
{
"status": "affected",
"version": "1.0.18"
},
{
"status": "affected",
"version": "1.0.19"
},
{
"status": "affected",
"version": "1.0.20"
},
{
"status": "affected",
"version": "1.0.21"
},
{
"status": "affected",
"version": "1.0.22"
},
{
"status": "affected",
"version": "1.0.23"
},
{
"status": "affected",
"version": "1.0.24"
},
{
"status": "affected",
"version": "1.0.25"
},
{
"status": "affected",
"version": "1.0.26"
},
{
"status": "affected",
"version": "1.0.27"
},
{
"status": "affected",
"version": "1.0.28"
},
{
"status": "affected",
"version": "1.0.29"
},
{
"status": "affected",
"version": "1.0.30"
},
{
"status": "affected",
"version": "1.0.31"
},
{
"status": "affected",
"version": "1.0.32"
},
{
"status": "affected",
"version": "1.0.33"
},
{
"status": "affected",
"version": "1.0.34"
},
{
"status": "affected",
"version": "1.0.35"
},
{
"status": "affected",
"version": "1.0.36"
},
{
"status": "affected",
"version": "1.0.37"
},
{
"status": "affected",
"version": "1.0.38"
},
{
"status": "affected",
"version": "1.0.39"
},
{
"status": "affected",
"version": "1.0.40"
},
{
"status": "affected",
"version": "1.0.41"
},
{
"status": "affected",
"version": "1.0.42"
},
{
"status": "affected",
"version": "1.0.43"
},
{
"status": "affected",
"version": "1.0.44"
},
{
"status": "affected",
"version": "1.0.45"
},
{
"status": "affected",
"version": "1.0.46"
},
{
"status": "affected",
"version": "1.0.47"
},
{
"status": "affected",
"version": "1.0.48"
},
{
"status": "affected",
"version": "1.0.49"
},
{
"status": "affected",
"version": "1.0.50"
},
{
"status": "affected",
"version": "1.0.51"
},
{
"status": "affected",
"version": "1.0.52"
},
{
"status": "affected",
"version": "1.0.53"
},
{
"status": "affected",
"version": "1.0.54"
},
{
"status": "affected",
"version": "1.0.55"
},
{
"status": "affected",
"version": "1.0.56"
},
{
"status": "affected",
"version": "1.0.57"
},
{
"status": "affected",
"version": "1.0.58"
},
{
"status": "affected",
"version": "1.0.59"
},
{
"status": "affected",
"version": "1.0.60"
},
{
"status": "affected",
"version": "1.0.61"
},
{
"status": "affected",
"version": "1.0.62"
},
{
"status": "affected",
"version": "1.0.63"
},
{
"status": "affected",
"version": "1.0.64"
},
{
"status": "affected",
"version": "1.0.65"
},
{
"status": "affected",
"version": "1.0.66"
},
{
"status": "affected",
"version": "1.0.67"
},
{
"status": "affected",
"version": "1.0.68"
},
{
"status": "affected",
"version": "1.0.69"
},
{
"status": "affected",
"version": "1.0.70"
},
{
"status": "affected",
"version": "1.0.71"
},
{
"status": "affected",
"version": "1.0.72"
},
{
"status": "affected",
"version": "1.0.73"
},
{
"status": "affected",
"version": "1.0.74"
},
{
"status": "affected",
"version": "1.0.75"
},
{
"status": "affected",
"version": "1.0.76"
},
{
"status": "affected",
"version": "1.0.77"
},
{
"status": "affected",
"version": "1.0.78"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Matan Haim Sandori"
},
{
"lang": "en",
"type": "reporter",
"value": "MatanS (VulDB User)"
},
{
"lang": "en",
"type": "analyst",
"value": "MatanS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used."
},
{
"lang": "de",
"value": "In Zavy86 WikiDocs bis 1.0.78 wurde eine problematische Schwachstelle gefunden. Betroffen ist eine unbekannte Verarbeitung der Datei template.inc.php. Durch Manipulation des Arguments path mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk passieren. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "Cross Site Scripting",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-07-20T11:44:05.636Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-317002 | Zavy86 WikiDocs template.inc.php cross site scripting",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.317002"
},
{
"name": "VDB-317002 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.317002"
},
{
"name": "Submit #609063 | Zavy86 WikiDocs 1.0.77 Cross Site Scripting",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.609063"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issuecomment-3034714777"
},
{
"tags": [
"exploit",
"issue-tracking"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/256#issue-3201516458"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-07-19T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-07-19T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-07-19T12:45:44.000Z",
"value": "VulDB entry last update"
}
],
"title": "Zavy86 WikiDocs template.inc.php cross site scripting"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-7887",
"datePublished": "2025-07-20T11:44:05.636Z",
"dateReserved": "2025-07-19T08:14:39.991Z",
"dateUpdated": "2025-07-21T13:19:35.520Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-23375 (GCVE-0-2022-23375)
Vulnerability from nvd – Published: 2022-02-19 15:43 – Updated: 2024-08-03 03:36
VLAI?
Summary
WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:36:20.404Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-19T15:43:09",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-23375",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wikidocs.it/",
"refsource": "MISC",
"url": "https://wikidocs.it/"
},
{
"name": "https://demo.wikidocs.it/",
"refsource": "MISC",
"url": "https://demo.wikidocs.it/"
},
{
"name": "https://github.com/Zavy86/WikiDocs",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"name": "https://github.com/Zavy86/WikiDocs/issues/28",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-23375",
"datePublished": "2022-02-19T15:43:09",
"dateReserved": "2022-01-18T00:00:00",
"dateUpdated": "2024-08-03T03:36:20.404Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2022-23376 (GCVE-0-2022-23376)
Vulnerability from nvd – Published: 2022-02-19 15:42 – Updated: 2024-08-03 03:36
VLAI?
Summary
WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T03:36:20.399Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-19T15:42:29",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://demo.wikidocs.it/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-23376",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wikidocs.it/",
"refsource": "MISC",
"url": "https://wikidocs.it/"
},
{
"name": "https://demo.wikidocs.it/",
"refsource": "MISC",
"url": "https://demo.wikidocs.it/"
},
{
"name": "https://github.com/Zavy86/WikiDocs",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs"
},
{
"name": "https://github.com/Zavy86/WikiDocs/issues/28",
"refsource": "MISC",
"url": "https://github.com/Zavy86/WikiDocs/issues/28"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-23376",
"datePublished": "2022-02-19T15:42:29",
"dateReserved": "2022-01-18T00:00:00",
"dateUpdated": "2024-08-03T03:36:20.399Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}