Published: 01/04/2009 Updated: 10/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 445

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote malicious users to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, and (4) tiki-orphan_pages.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tiki tikiwiki cms\\/groupware 2.2

source: wwwsecurityfocuscom/bid/34106/info TikiWiki is prone to a cross-site scripting vulnerability An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials TikiWiki 22 through 30 beta1 are vul ...

source: wwwsecurityfocuscom/bid/34105/info TikiWiki is prone to a cross-site scripting vulnerability An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials TikiWiki 22 through 30 beta1 are vul ...

source: wwwsecurityfocuscom/bid/34107/info TikiWiki is prone to a cross-site scripting vulnerability An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials TikiWiki 22 through 30 beta1 are vul ...

CWE-79 http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc http://info.tikiwiki.org/tiki-read_article.php?articleId=51 http://secunia.com/advisories/34273 http://www.securityfocus.com/bid/34106 http://www.securityfocus.com/bid/34107 http://www.securityfocus.com/bid/34108 http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup http://www.securityfocus.com/bid/34105 http://www.securityfocus.com/archive/1/501702/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32853/

CVE-2009-1204

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect