Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
tiki tiki vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2005-0200
TikiWiki prior to 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote malicious users to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.
Tiki Tikiwiki Cms/groupware
5.4
CVSSv3
CVE-2018-14850
Stored XSS vulnerabilities in Tiki prior to 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
Tiki Tikiwiki Cms/groupware
NA
CVE-2008-1047
Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki prior to 1.9.10.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Tiki Tikiwiki Cms/groupware
6.1
CVSSv3
CVE-2011-4336
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
Tiki Tikiwiki Cms/groupware
1 EDB exploit
5.4
CVSSv3
CVE-2018-7188
An XSS vulnerability (via an SVG image) in Tiki prior to 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php.
Tiki Tikiwiki Cms/groupware
NA
CVE-2008-5318
Unspecified vulnerability in Tikiwiki prior to 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653.
Tiki Tikiwiki Cms/groupware
6.1
CVSSv3
CVE-2016-7394
tiki wiki cms groupware <=15.2 has a xss vulnerability, allow attackers steal user's cookie.
Tiki Tikiwiki Cms/groupware
NA
CVE-2004-1386
TikiWiki prior to 1.8.4.1 does not properly verify uploaded images, which could allow remote malicious users to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.
Tiki Tikiwiki Cms/groupware
9.8
CVSSv3
CVE-2012-0911
TikiWiki CMS/Groupware prior to 6.7 LTS and prior to 8.4 allows remote malicious users to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.p...
Tiki Tikiwiki Cms/groupware
2 EDB exploits
8.8
CVSSv3
CVE-2018-20719
In Tiki prior to 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.
Tiki Tikiwiki Cms/groupware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29824
CVE-2024-30095
CVE-2024-30104
client side
CVE-2024-5840
CVE-2024-34405
unprivileged
wireless
CVE-2024-4577
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »