Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tikiwiki cms groupware vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-3996
TikiWiki CMS/Groupware 8.3 and previous versions allows remote malicious users to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.
Tiki Tikiwiki Cms\\/groupware 7.2Tiki Tikiwiki Cms\\/groupware 7.0Tiki Tikiwiki Cms\\/groupware 5.0Tiki Tikiwiki Cms\\/groupware 4.1Tiki Tikiwiki Cms\\/groupware 3.3Tiki Tikiwiki Cms\\/groupware 3.5Tiki Tikiwiki Cms\\/groupware 6.1Tiki Tikiwiki Cms\\/groupware 6.0Tiki Tikiwiki Cms\\/groupware 5.3Tiki Tikiwiki Cms\\/groupware 5.2Tiki Tikiwiki Cms\\/groupware 2.2Tiki Tikiwiki Cms\\/groupwareTiki Tikiwiki Cms\\/groupware 8.1Tiki Tikiwiki Cms\\/groupware 8.0Tiki Tikiwiki Cms\\/groupware 4.0Tiki Tikiwiki Cms\\/groupware 4Tiki Tikiwiki Cms\\/groupware 3.1Tiki Tikiwiki Cms\\/groupware 3.0Tiki Tikiwiki Cms\\/groupware 7.1Tiki Tikiwiki Cms\\/groupware 6.2Tiki Tikiwiki Cms\\/groupware 5.1Tiki Tikiwiki Cms\\/groupware 4.2
NA
CVE-2011-4551
Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware prior to 8.2 and LTS prior to 6.5 allows remote malicious users to inject arbitrary web script or HTML via arbitrary parameters.
Tiki Tikiwiki Cms\\/groupware 7.2Tiki Tikiwiki Cms\\/groupware 6.1Tiki Tikiwiki Cms\\/groupware 4.1Tiki Tikiwiki Cms\\/groupware 4Tiki Tikiwiki Cms\\/groupware 3.5Tiki Tikiwiki Cms\\/groupware 2.2Tiki Tikiwiki Cms\\/groupwareTiki Tikiwiki Cms\\/groupware 8.0Tiki Tikiwiki Cms\\/groupware 7.0Tiki Tikiwiki Cms\\/groupware 3.1Tiki Tikiwiki Cms\\/groupware 3.0Tiki Tikiwiki Cms\\/groupware 3.3Tiki Tikiwiki Cms\\/groupware 3.2Tiki Tikiwiki Cms\\/groupware 5.1Tiki Tikiwiki Cms\\/groupware 5.0Tiki Tikiwiki Cms\\/groupware 5.2Tiki Tikiwiki Cms\\/groupware 5.3Tiki Tikiwiki Cms\\/groupware 7.1Tiki Tikiwiki Cms\\/groupware 6.0Tiki Tikiwiki Cms\\/groupware 6.2Tiki Tikiwiki Cms\\/groupware 4.2Tiki Tikiwiki Cms\\/groupware 4.0
6.1
CVSSv3
CVE-2017-9145
TikiFilter.php in Tiki Wiki CMS Groupware 12.x up to and including 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
Tiki Tikiwiki Cms\\/groupware 12.4Tiki Tikiwiki Cms\\/groupware 12.5Tiki Tikiwiki Cms\\/groupware 12.6Tiki Tikiwiki Cms\\/groupware 12.7Tiki Tikiwiki Cms\\/groupware 16.0Tiki Tikiwiki Cms\\/groupware 16.1Tiki Tikiwiki Cms\\/groupware 16.2Tiki Tikiwiki Cms\\/groupware 13.2Tiki Tikiwiki Cms\\/groupware 14.1Tiki Tikiwiki Cms\\/groupware 15.0Tiki Tikiwiki Cms\\/groupware 14.0Tiki Tikiwiki Cms\\/groupware 12.0Tiki Tikiwiki Cms\\/groupware 12.2Tiki Tikiwiki Cms\\/groupware 12.9Tiki Tikiwiki Cms\\/groupware 13.1Tiki Tikiwiki Cms\\/groupware 15.1Tiki Tikiwiki Cms\\/groupware 15.3Tiki Tikiwiki Cms\\/groupware 12.1Tiki Tikiwiki Cms\\/groupware 12.3Tiki Tikiwiki Cms\\/groupware 12.8Tiki Tikiwiki Cms\\/groupware 13.0Tiki Tikiwiki Cms\\/groupware 15.2
8
CVSSv3
CVE-2017-14924
Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki prior to 16.3, 17.x prior to 17.1, 12 LTS prior to 12.12 LTS, and 15 LTS prior to 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG eleme...
Tiki Tikiwiki Cms\\/groupware 15.0Tiki Tikiwiki Cms\\/groupware 12.2Tiki Tikiwiki Cms\\/groupware 12.4Tiki Tikiwiki Cms\\/groupware 12.9Tiki Tikiwiki Cms\\/groupware 12.11Tiki Tikiwiki Cms\\/groupware 15.2Tiki Tikiwiki Cms\\/groupware 15.3Tiki Tikiwiki Cms\\/groupware 15.4Tiki Tikiwiki Cms\\/groupware 12.0Tiki Tikiwiki Cms\\/groupware 16.0Tiki Tikiwiki Cms\\/groupware 16.1Tiki Tikiwiki Cms\\/groupware 16.2Tiki Tikiwiki Cms\\/groupware 12.5Tiki Tikiwiki Cms\\/groupware 12.6Tiki Tikiwiki Cms\\/groupware 12.7Tiki Tikiwiki Cms\\/groupware 12.8Tiki Tikiwiki Cms\\/groupware 15.1Tiki Tikiwiki Cms\\/groupware 12.1Tiki Tikiwiki Cms\\/groupware 12.3Tiki Tikiwiki Cms\\/groupware 12.10Tiki Tikiwiki Cms\\/groupware 17.0
8
CVSSv3
CVE-2017-14925
Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki prior to 16.3, 17.x prior to 17.1, 12 LTS prior to 12.12 LTS, and 15 LTS prior to 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, re...
Tiki Tikiwiki Cms\\/groupware 15.4Tiki Tikiwiki Cms\\/groupware 12.1Tiki Tikiwiki Cms\\/groupware 12.6Tiki Tikiwiki Cms\\/groupware 12.8Tiki Tikiwiki Cms\\/groupware 16.2Tiki Tikiwiki Cms\\/groupware 12.2Tiki Tikiwiki Cms\\/groupware 12.3Tiki Tikiwiki Cms\\/groupware 12.4Tiki Tikiwiki Cms\\/groupware 12.5Tiki Tikiwiki Cms\\/groupware 15.0Tiki Tikiwiki Cms\\/groupware 15.1Tiki Tikiwiki Cms\\/groupware 15.2Tiki Tikiwiki Cms\\/groupware 12.10Tiki Tikiwiki Cms\\/groupware 12.11Tiki Tikiwiki Cms\\/groupware 17.0Tiki Tikiwiki Cms\\/groupware 16.0Tiki Tikiwiki Cms\\/groupware 16.1Tiki Tikiwiki Cms\\/groupware 15.3Tiki Tikiwiki Cms\\/groupware 12.0Tiki Tikiwiki Cms\\/groupware 12.7Tiki Tikiwiki Cms\\/groupware 12.9
NA
CVE-2006-2635
Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote malicious users to inject arbitrary web script or HTML via malformed nested HTML tags such as "<scr<script>ipt>" in (1) offset and (2) days parameters...
Tiki Tikiwiki Cms\\/groupware 1.9.0Tiki Tikiwiki Cms\\/groupware 1.9.3.1Tiki Tikiwiki Cms\\/groupware 1.9.5Tiki Tikiwiki Cms\\/groupware 1.9.4Tiki Tikiwiki Cms\\/groupware 1.9.3Tiki Tikiwiki Cms\\/groupware 1.9.6Tiki Tikiwiki Cms\\/groupware 1.9.3.2Tiki Tikiwiki Cms\\/groupware 1.9.8.1Tiki Tikiwiki Cms\\/groupware 1.9.2Tiki Tikiwiki Cms\\/groupware 1.9.1Tiki Tikiwiki Cms\\/groupware 1.9.11Tiki Tikiwiki Cms\\/groupware 1.9.9Tiki Tikiwiki Cms\\/groupware 1.9.7Tiki Tikiwiki Cms\\/groupware 1.9.8Tiki Tikiwiki Cms\\/groupware 1.9.10
NA
CVE-2008-3653
Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware prior to 2.0 have unknown impact and attack vectors.
Tiki Tikiwiki Cms\\/groupwareTiki Tikiwiki Cms\\/groupware 1.9.2Tiki Tikiwiki Cms\\/groupware 1.9.1Tiki Tikiwiki Cms\\/groupware 1.9.4Tiki Tikiwiki Cms\\/groupware 1.9.3Tiki Tikiwiki Cms\\/groupware 1.6.1Tiki Tikiwiki Cms\\/groupware 1.9.8.1Tiki Tikiwiki Cms\\/groupware 1.9.0Tiki Tikiwiki Cms\\/groupware 1.9.7Tiki Tikiwiki Cms\\/groupware 1.9.8Tiki Tikiwiki Cms\\/groupware 1.9.5Tiki Tikiwiki Cms\\/groupware 1.9.6
NA
CVE-2008-3654
Unspecified vulnerability in TikiWiki CMS/Groupware prior to 2.0 allows malicious users to obtain "path and PHP configuration" via unknown vectors.
Tiki Tikiwiki Cms\\/groupwareTiki Tikiwiki Cms\\/groupware 1.9.8.1Tiki Tikiwiki Cms\\/groupware 1.9.2Tiki Tikiwiki Cms\\/groupware 1.9.1Tiki Tikiwiki Cms\\/groupware 1.9.7Tiki Tikiwiki Cms\\/groupware 1.9.4Tiki Tikiwiki Cms\\/groupware 1.9.3Tiki Tikiwiki Cms\\/groupware 1.9.0Tiki Tikiwiki Cms\\/groupware 1.9.8Tiki Tikiwiki Cms\\/groupware 1.9.5Tiki Tikiwiki Cms\\/groupware 1.9.6Tiki Tikiwiki Cms\\/groupware 1.6.1
NA
CVE-2013-4714
Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS prior to 6.13LTS, 9 LTS prior to 9.7LTS, 10.x prior to 10.4, and 11.x prior to 11.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Tiki Tikiwiki Cms\\/groupware 9.0Tiki Tikiwiki Cms\\/groupware 6.12Tiki Tikiwiki Cms\\/groupware 9.6Tiki Tikiwiki Cms\\/groupware 9.5Tiki Tikiwiki Cms\\/groupware 9.4Tiki Tikiwiki Cms\\/groupware 10.0Tiki Tikiwiki Cms\\/groupware 11.0Tiki Tikiwiki Cms\\/groupware 6.8Tiki Tikiwiki Cms\\/groupware 6.10Tiki Tikiwiki Cms\\/groupware 9.2Tiki Tikiwiki Cms\\/groupware 9.1Tiki Tikiwiki Cms\\/groupware 10.3Tiki Tikiwiki Cms\\/groupware 10.1Tiki Tikiwiki Cms\\/groupware 6.9Tiki Tikiwiki Cms\\/groupware 6.11Tiki Tikiwiki Cms\\/groupware 9.3Tiki Tikiwiki Cms\\/groupware 10.2
NA
CVE-2013-4715
SQL injection vulnerability in Tiki Wiki CMS Groupware 6 LTS prior to 6.13LTS, 9 LTS prior to 9.7LTS, 10.x prior to 10.4, and 11.x prior to 11.1 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Tiki Tikiwiki Cms\\/groupware 6.12Tiki Tikiwiki Cms\\/groupware 9.6Tiki Tikiwiki Cms\\/groupware 9.5Tiki Tikiwiki Cms\\/groupware 9.4Tiki Tikiwiki Cms\\/groupware 10.0Tiki Tikiwiki Cms\\/groupware 11.0Tiki Tikiwiki Cms\\/groupware 9.0Tiki Tikiwiki Cms\\/groupware 6.8Tiki Tikiwiki Cms\\/groupware 6.10Tiki Tikiwiki Cms\\/groupware 9.2Tiki Tikiwiki Cms\\/groupware 9.1Tiki Tikiwiki Cms\\/groupware 10.3Tiki Tikiwiki Cms\\/groupware 10.1Tiki Tikiwiki Cms\\/groupware 6.9Tiki Tikiwiki Cms\\/groupware 6.11Tiki Tikiwiki Cms\\/groupware 9.3Tiki Tikiwiki Cms\\/groupware 10.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook