FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat.
Search vulnerabilities
CVE-2006-6889
CVSS 2.0 · 7.5 High
EPSS 3.8%
KEV · Not listed
Vendors
Products
CVE-2005-1799
Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS 2.0 · 4.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2006-3380
Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case.
CVSS 2.0 · 5.0 Medium
EPSS 1.6%
KEV · Not listed
Vendors
Products
CVE-2010-1529
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote attackers to execute arbitrary SQL commands via the faqid parameter in an faq action to index.php.
CVSS 2.0 · 7.5 High
EPSS 1.1%
KEV · Not listed
Vendors
Products
Page 1 of 1.