Webwork - vulnerabilities (CVEs)

4 CVEs in 3 products, 0 in the last 30 days, newest from 2025-09-08.

Products

• Webwork - 2 CVEs
• Program Generation Language - 1 CVEs
• Webwork Php Script - 1 CVEs

Newest CVEs of Webwork

• CVE-2025-40642 - CVSS 5.1 (medium), 2025-09-08: Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request…
• CVE-2006-6629 - CVSS 7.5 (high), 2006-12-18: lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid…
• CVE-2006-2839 - CVSS 6.4 (medium), 2006-06-06: Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote…
• CVE-2006-0446 - CVSS 6.5 (medium), 2006-01-27: Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack…