tiki-graph_formula.php in TikiWiki 1.9.8 allows remote malicious users to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
tiki tikiwiki cms\\/groupware 1.9.8 |