WikkaWiki is prone to multiple security vulnerabilities, including: 1. An SQL injection vulnerability. 2. An arbitrary file upload vulnerability. 3. An arbitrary file deletion vulnerability. 4. An arbitrary file download vulnerability. 5. A PHP code injection vulnerability. Attackers can exploit these issues to modify the logic of SQL queries upload, delete, or download arbitrary files or inject and execute arbitrary PHP code in the context of the affected application. Other attacks may also be possible. WikkaWiki 1.3.2 and prior versions are vulnerable.

• http://wikkawiki.org/
• http://www.securityfocus.com/archive/1/520687
• http://www.securityfocus.com/bid/50866

---

Updated on 2015-03-25