CVE-2013-6365: Cross-Site Request Forgery (CSRF)

Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions...

CVE-2013-6364: Improper Neutralization of Input During Web Page Generation

Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book...

PT-2019-6994

Name of the Vulnerable Software and Affected Versions Horde Groupware Webmail Edition affected versions not specified Description The issue concerns Horde Groupware Webmail Edition, which has problems with CSRF and XSS when saving a search as a virtual address book. Recommendations At the moment,...

CVE-2013-6275: Cross-Site Request Forgery (CSRF)

Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php...

Tiki Wiki CMS Groupware Cross-Site Request Forgery Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site request forgery vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which arises from a WEB application that does not adequately validate that a request is coming from a...

Tiki Wiki CMS Groupware File Inclusion Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A file inclusion vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which can be exploited by an attacker to include arbitrary files...

Tiki Wiki CMS Groupware cross-site scripting vulnerability (CNVD-2019-39359)

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site scripting vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which stems from a lack of proper validation of client-side data in the web application and can be exploited ...

CVE-2010-4241

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4240

Tiki Wiki CMS Groupware 5.2 has XSS...

Cross site scripting

Tiki Wiki CMS Groupware 5.2 has XSS...

Cross site request forgery (csrf)

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 is affected by a Local File Inclusion (LFI) vulnerability (CVE-2010-4239). The Nuclei template confirms the issue in Tiki Wiki CMS Groupware 5.2, describing how an LFI flaw can lead to unauthorized access to sensitive files. Impact is stated as exposing sensitive infor...

CVE-2010-4240

Tiki Wiki CMS Groupware 5.2 has XSS...

CVE-2010-4240

The CVE-2010-4240 entry concerns Tiki Wiki CMS Groupware 5.2 with a cross-site scripting (XSS) vulnerability. The connected records indicate an XSS flaw arising from insufficient validation of client-side data in the web application, enabling execution of injected script. No exploit details, affe...

CVE-2010-4241

CVE-2010-4241 concerns Tiki Wiki CMS Groupware 5.2, where the web application is vulnerable to a Cross-Site Request Forgery (CSRF) due to insufficient validation of request origin. The vulnerability allows an attacker to induce a user to perform unintended actions on a trusted site, potentially i...

CVE-2010-4239: Improper Input Validation

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

PT-2019-6585

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 5.2 Description The issue is related to a CSRF problem. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploite...

PT-2019-6583

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 5.2 Description The issue is related to Local File Inclusion. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2019-6584

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 5.2 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to...