5
CVSSv2

CVE-2005-3529

Published: 20/11/2005 Updated: 19/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

tiki-view_forum_thread.php in TikiWiki 1.9.0 up to and including 1.9.2 allows remote malicious users to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability.

Vulnerable Product Search on Vulmon Subscribe to Product

tiki tikiwiki cms\\/groupware 1.9.0

tiki tikiwiki cms\\/groupware 1.9.1

tiki tikiwiki cms\\/groupware 1.9.2

Exploits

TikiWiki versions 19x up to and including 192 suffer from a cross site scripting vulnerability and possible SQL injection vulnerabilities ...