Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
tikiwiki cms groupware vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2016-7394
tiki wiki cms groupware <=15.2 has a xss vulnerability, allow attackers steal user's cookie.
Tiki Tikiwiki Cms\\/groupware
8.8
CVSSv3
CVE-2018-20719
In Tiki prior to 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.
Tiki Tikiwiki Cms\\/groupware
5.4
CVSSv3
CVE-2018-14849
Tiki prior to 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php.
Tiki Tikiwiki Cms\\/groupware
NA
CVE-2008-1047
Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki prior to 1.9.10.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Tiki Tikiwiki Cms\\/groupware
6.1
CVSSv3
CVE-2011-4336
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
Tiki Tikiwiki Cms\\/groupware
1 EDB exploit
NA
CVE-2005-0200
TikiWiki prior to 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote malicious users to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.
Tiki Tikiwiki Cms\\/groupware
5.4
CVSSv3
CVE-2018-14850
Stored XSS vulnerabilities in Tiki prior to 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
Tiki Tikiwiki Cms\\/groupware
9.8
CVSSv3
CVE-2012-0911
TikiWiki CMS/Groupware prior to 6.7 LTS and prior to 8.4 allows remote malicious users to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.p...
Tiki Tikiwiki Cms\\/groupware
2 EDB exploits
NA
CVE-2004-1386
TikiWiki prior to 1.8.4.1 does not properly verify uploaded images, which could allow remote malicious users to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.
Tiki Tikiwiki Cms\\/groupware
5.4
CVSSv3
CVE-2018-7188
An XSS vulnerability (via an SVG image) in Tiki prior to 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php.
Tiki Tikiwiki Cms\\/groupware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028
memory leak
log injection
CVE-2024-3400
CVE-2022-48695
CVE-2022-48675
CVE-2024-34487
CVE-2024-33792
spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »