← Back

Jamwiki

jamwiki

Vendor: Jamwiki • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-5054
1Jamwiki
1Jamwiki
Apr 29, 2026
Nov 23, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Special:Login in JAMWiki before 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVE-2007-0131
1Jamwiki
1Jamwiki
Apr 23, 2026
Jan 9, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows remote attackers to make unauthorized changes to the wiki.