Code injection

2019-08-2213:15:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-download_file.php?display&fileId= URI.

CPENameOperatorVersion
tikiwiki_cms\\/groupwareeq18.4

CPE	Name	Operator	Version
	tikiwiki_cms\\/groupware	eq	18.4

References

pastebin.com/wEM7rnG7