Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

tiki tikiwiki cms groupware 3.1 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2010-1134

SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x prior to 3.5 allows remote malicious users to execute arbitrary SQL commands via the $searchDate variable.
Tiki Tikiwiki Cms/groupware 3.2Tiki Tikiwiki Cms/groupware 3.1Tiki Tikiwiki Cms/groupware 3.0Tiki Tikiwiki Cms/groupware 3.3Tiki Tikiwiki Cms/groupware 3.4
NA

CVE-2010-1136

The Standard Remember method in TikiWiki CMS/Groupware 3.x prior to 3.5 allows remote malicious users to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.ph...
Tiki Tikiwiki Cms/groupware 3.2Tiki Tikiwiki Cms/groupware 3.1Tiki Tikiwiki Cms/groupware 3.0Tiki Tikiwiki Cms/groupware 3.3Tiki Tikiwiki Cms/groupware 3.4
NA

CVE-2012-3996

TikiWiki CMS/Groupware 8.3 and previous versions allows remote malicious users to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.
Tiki Tikiwiki Cms/groupware 3.2Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 4.1Tiki Tikiwiki Cms/groupware 3.1Tiki Tikiwiki Cms/groupware 7.2Tiki Tikiwiki Cms/groupware 7.1Tiki Tikiwiki Cms/groupware 6.1Tiki Tikiwiki Cms/groupware 6.0Tiki Tikiwiki Cms/groupware 2.2Tiki Tikiwiki Cms/groupware 8.1Tiki Tikiwiki Cms/groupware 3.0Tiki Tikiwiki Cms/groupware 3.3Tiki Tikiwiki Cms/groupware 5.0Tiki Tikiwiki Cms/groupware 8.0Tiki Tikiwiki Cms/groupware 5.2Tiki Tikiwiki Cms/groupware 4Tiki Tikiwiki Cms/groupware 4.2Tiki Tikiwiki Cms/groupware 5.3Tiki Tikiwiki Cms/groupware 4.0Tiki Tikiwiki Cms/groupware 3.5Tiki Tikiwiki Cms/groupware 6.2Tiki Tikiwiki Cms/groupware 3.4
NA

CVE-2011-4551

Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware prior to 8.2 and LTS prior to 6.5 allows remote malicious users to inject arbitrary web script or HTML via arbitrary parameters.
Tiki Tikiwiki Cms/groupware 3.2Tiki Tikiwiki Cms/groupware 4.1Tiki Tikiwiki Cms/groupware 3.1Tiki Tikiwiki Cms/groupware 7.2Tiki Tikiwiki Cms/groupware 7.1Tiki Tikiwiki Cms/groupware 6.1Tiki Tikiwiki Cms/groupware 6.0Tiki Tikiwiki Cms/groupware 2.2Tiki Tikiwiki Cms/groupwareTiki Tikiwiki Cms/groupware 3.0Tiki Tikiwiki Cms/groupware 3.3Tiki Tikiwiki Cms/groupware 5.0Tiki Tikiwiki Cms/groupware 8.0Tiki Tikiwiki Cms/groupware 5.2Tiki Tikiwiki Cms/groupware 4Tiki Tikiwiki Cms/groupware 4.2Tiki Tikiwiki Cms/groupware 5.3Tiki Tikiwiki Cms/groupware 4.0Tiki Tikiwiki Cms/groupware 3.5Tiki Tikiwiki Cms/groupware 6.2Tiki Tikiwiki Cms/groupware 3.4Tiki Tikiwiki Cms/groupware 5.1
NA

CVE-2005-1921

Eval injection vulnerability in PEAR XML_RPC 1.3.0 and previous versions (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and previous versions, as used in products such as (1) WordPress, (2) Serendipity, (3) Drupal, (4) egroupware, (5) MailWatch, (6)...
Php Xml RpcGggeek PhpxmlrpcDrupal DrupalTiki Tikiwiki Cms/groupwareDebian Debian Linux 3.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusionCVE-2023-38506CVE-2024-37198CVE-2023-45197CVE-2024-38621CVE-2024-30103elevation of privilegeCVE-2024-0044IMAP
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook