TC
Product
Tikiwiki Cms/groupware
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 16Low 0
Watch
Add Tikiwiki Cms/groupware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-6168 | – | Nov 29 | tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email… Affected: through 1.9.6; 1.6.1; 1.9.0; 1.9.0; 1.9.0; 1.9.0; +5 more |
| CVE-2006-6163 | – | Nov 29 | Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters Affected: through 1.9.6; 1.6.1; 1.9.0; 1.9.0; 1.9.0; 1.9.0; +5 more |
| CVE-2006-6162 | – | Nov 29 | Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter Affected: 1.9.6 |
| CVE-2006-5702 | – | Nov 4 | Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1) tiki-listpages.php, (2)… Affected: 1.9.5 |
| CVE-2006-5703 | – | Nov 4 | Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades… Affected: 1.9.5 |
| CVE-2006-4734 | – | Sep 13 | Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow remote attackers to execute arbitrary SQL commands via the (1) pid and (2) where… Affected: 1.9.4 |
| CVE-2006-4602 | – | Sep 7 | Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath parameter that… Affected: 1.9.4 |
| CVE-2006-4299 | – | Aug 23 | Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter Affected: 1.9.4 |
| CVE-2006-3047 | – | Jun 16 | Cross-site scripting (XSS) vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via unknown attack… Affected: through 1.9.3.1; 1.9.0; 1.9.0; 1.9.0; 1.9.0; 1.9.1; +2 more |
| CVE-2006-3048 | – | Jun 16 | SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vectors Affected: through 1.9.3.1; 1.9.0; 1.9.0; 1.9.0; 1.9.0; 1.9.1; +2 more |
| CVE-2006-2635 | – | May 30 | Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested… Affected: 1.9.0; 1.9.0; 1.9.0; 1.9.0; 1.9.1; 1.9.2; +12 more |
| CVE-2005-3528 | – | Nov 20 | Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 1.9.0; 1.9.1; 1.9.2 |
| CVE-2005-3529 | – | Nov 20 | tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to… Affected: 1.9.0; 1.9.1; 1.9.2 |
| CVE-2005-1925 | – | Nov 18 | Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suck_url parameter to… Affected: through 1.9.0; 1.6.1; 1.9.0; 1.9.0; 1.9.0 |
| CVE-2005-3283 | – | Oct 23 | Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors Affected: through 1.9.1; 1.9.0; 1.9.0; 1.9.0; 1.9.0 |
| CVE-2005-1921 | – | Jul 5 | Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such… Affected: before 1.8.5 |
| CVE-2005-0200 | – | May 2 | TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP… Affected: through 1.6.1 |
| CVE-2004-1386 | – | Dec 31 | TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than… Affected: through 1.6.1 |
| CVE-2004-1928 | – | Apr 12 | The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL Affected: through 1.8.1; 1.6.1 |
| CVE-2004-1925 | – | Apr 12 | Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in… Affected: through 1.8.1; 1.6.1 |
| CVE-2004-1924 | – | Apr 11 | Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the… Affected: through 1.8.1; 1.6.1 |
| CVE-2004-1927 | – | Apr 11 | Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of… Affected: through 1.8.1; 1.6.1 |
| CVE-2004-1926 | – | Apr 11 | Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields… Affected: through 1.8.1; 1.6.1 |
| CVE-2004-1923 | – | Apr 11 | Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3)… Affected: through 1.8.1; 1.6.1 |