Archive
14 September 2007
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium —
XWiki Remote Code Execution
PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose …
-
Medium 6.1CVE-2007-4465 EPSS 26%
Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on…