Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

tiki tikiwiki cms groupware 1.9.7 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2007-6526

Cross-site scripting (XSS) vulnerability in tiki-special_chars.php in TikiWiki prior to 1.9.9 allows remote malicious users to inject arbitrary web script or HTML via the area_name parameter.
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2007-6528

Directory traversal vulnerability in tiki-listmovies.php in TikiWiki prior to 1.9.9 allows remote malicious users to read arbitrary files via a .. (dot dot) and modified filename in the movie parameter.
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2007-6529

Multiple unspecified vulnerabilities in TikiWiki prior to 1.9.9 have unknown impact and attack vectors involving (1) tiki-edit_css.php, (2) tiki-list_games.php, or (3) tiki-g-admin_shared_source.php.
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2007-5682

Incomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki prior to 1.9.8.2 allows remote malicious users to execute arbitrary code by using variable functions and variable variables to write variables whose names match the whitelist, a different vulnerability than ...
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2008-3653

Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware prior to 2.0 have unknown impact and attack vectors.
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.8Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.8.1Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2008-3654

Unspecified vulnerability in TikiWiki CMS/Groupware prior to 2.0 allows malicious users to obtain "path and PHP configuration" via unknown vectors.
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.8Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.8.1Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2007-5683

Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the username parameter to the password reminder page (tiki-remind_password.php), (2) IMG tags in wiki pages, a...
Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupware 1.9.8Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2007-5684

Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and previous versions allow remote malicious users to include and execute arbitrary files via an absolute pathname in (1) error_handler_file and (2) local_php parameters to (a) tiki-index.php, or (3) encoded "....
Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupware 1.9.8Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2006-2635

Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote malicious users to inject arbitrary web script or HTML via malformed nested HTML tags such as "<scr<script>ipt>" in (1) offset and (2) days parameters...
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupware 1.9.10Tiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupware 1.9.3.1Tiki Tikiwiki Cms/groupware 1.9.8Tiki Tikiwiki Cms/groupware 1.9.6Tiki Tikiwiki Cms/groupware 1.9.11Tiki Tikiwiki Cms/groupware 1.9.8.1Tiki Tikiwiki Cms/groupware 1.9.9Tiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1Tiki Tikiwiki Cms/groupware 1.9.3.2Tiki Tikiwiki Cms/groupware 1.9.7
NA

CVE-2006-6163

Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki prior to 1.9.7 allows remote malicious users to inject arbitrary JavaScript via unspecified parameters.
Tiki Tikiwiki Cms/groupware 1.9.4Tiki Tikiwiki Cms/groupware 1.9.0Tiki Tikiwiki Cms/groupware 1.9.3Tiki Tikiwiki Cms/groupware 1.6.1Tiki Tikiwiki Cms/groupware 1.9.5Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 1.9.2Tiki Tikiwiki Cms/groupware 1.9.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilegeCVE-2022-48762CVE-2022-48751CVE-2024-37079CVE-2024-30848LFIman-in-the-middleCVE-2022-48736CVE-2024-30103
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook