tiki tikiwiki cms groupware 4.2 vulnerabilities and exploits

(subscribe to this query)

TikiWiki CMS/Groupware 8.3 and previous versions allows remote malicious users to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.

2 EDB exploits

Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware prior to 8.2 and LTS prior to 6.5 allows remote malicious users to inject arbitrary web script or HTML via arbitrary parameters.

1 EDB exploit

The user_logout function in TikiWiki CMS/Groupware 4.x prior to 4.2 does not properly delete user login cookies, which allows remote malicious users to gain access via cookie reuse.

Tiki Tikiwiki Cms/groupware 4.1 Tiki Tikiwiki Cms/groupware 4.0

Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x prior to 4.2 allow remote malicious users to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchindex.php and (2) tiki-searchresults.php.

Tiki Tikiwiki Cms/groupware 4.1 Tiki Tikiwiki Cms/groupware 4.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook