Lucene search

[email protected]CVE-2010-1133

HistoryMar 27, 2010 - 7:07 p.m.

CVE-2010-1133

2010-03-2719:07:11

CWE-89

[email protected]

web.nvd.nist.gov

cve

2010

1133

sql injection

tikiwiki

cms

groupware

nvd

vulnerability

remote attackers

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchindex.php and (2) tiki-searchresults.php.

Affected configurations

NVD

Node

tikitikiwiki_cms\/groupwareMatch4.0

tikitikiwiki_cms\/groupwareMatch4.1

CPENameOperatorVersion
tiki:tikiwiki_cms\/groupwaretiki tikiwiki cms/groupwareeq4.0
tiki:tikiwiki_cms\/groupwaretiki tikiwiki cms/groupwareeq4.1

CPE	Name	Operator	Version
tiki:tikiwiki_cms\/groupware	tiki tikiwiki cms/groupware	eq	4.0
tiki:tikiwiki_cms\/groupware	tiki tikiwiki cms/groupware	eq	4.1

References

info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases

osvdb.org/62800

secunia.com/advisories/38896

tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25424

tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25435

www.securityfocus.com/bid/38608

exchange.xforce.ibmcloud.com/vulnerabilities/56769

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

Related for CVE-2010-1133

nvd1 prion1 cvelist1 openvas1