Path traversal

TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to 1 admin/includecalendar.php, 2 tiki-rsserror.php, or 3 tiki-watershedservice.php...

CVE-2012-0911

CVE-2012-0911 affects Tiki Wiki CMS Groupware prior to 6.7 LTS and before 8.4. The vulnerability is an unserialize() flaw in which crafted serialized objects can be processed by the application to execute arbitrary PHP code. The issue is triggered in multiple entry points, notably via unserialize...

CVE-2012-3996

TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to 1 admin/includecalendar.php, 2 tiki-rsserror.php, or 3 tiki-watershedservice.php...

CVE-2012-3996

The vulnerability CVE-2012-3996 affects TikiWiki CMS/Groupware 8.3 and earlier. It allows remote attackers to disclose the installation path by directly requesting one of three files: admin/include_calendar.php, tiki-rss_error.php, or tiki-watershed_service.php. The impact is information disclosu...

PT-2012-2943 · Tiki · Tikiwiki Cms/Groupware

Name of the Vulnerable Software and Affected Versions: TikiWiki CMS/Groupware versions prior to 6.7 LTS and prior to 8.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a crafted serialized object. This can be achieved through several parameters, including...

Tiki Wiki CMS Groupware 'unserialize()' PHP代码执行漏洞

Bugtraq ID: 54298 CVE ID:CVE-2012-0911 Tiki Wiki CMS Groupware是一款内容管理和协作系统。 Tiki Wiki CMS Groupware多个脚本使用用户可控的输入调用"unserialize"，这可导致通过传递ad-hoc Zend Framework序列化对象来执行任意PHP代码。 0 Tiki Wiki CMS Groupware = 8.3 厂商补丁： Tiki Wiki ----- Tiki Wiki CMS Groupware 8.4已经修复此漏洞，建议用户下载使用：...

Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution

Exploit for php platform in category web applications ?php / ----------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.3 "unserialize" PHP Code Execution ----------------------------------------------------------------- author...........: Egidio Romano aka EgiX...

Agora Project 2.13.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Agora Project 2.13.1 Multiple Vulnerabilities Release Date Bug. 15-06-2012 Vendor Notification Date. Never Product. Agora project Affected versions. 2.13.1 and less Type. No Commercial Attack Vector. XSS, SQLi, BSQLi Solution Status. unpublish...

agora project 2.13.1 - Multiple Vulnerabilities

Agora Project 2.13.1 Multiple Vulnerabilities Release Date Bug. 15-06-2012 Vendor Notification Date. Never Product. Agora project Affected versions. 2.13.1 and less Type. No Commercial Attack Vector. XSS, SQLi, BSQLi Solution Status. unpublished CVE reference. Not yet assigned Download...

agora project 2.13.1 - Multiple Vulnerabilities

agora project 2.13.1 - Multiple Vulnerabilities Agora Project 2.13.1 Multiple Vulnerabilities Release Date Bug. 15-06-2012 Vendor Notification Date. Never Product. Agora project Affected versions. 2.13.1 and less Type. No Commercial Attack Vector. XSS, SQLi, BSQLi Solution Status. unpublished CVE...

Agora-Project 2.12.11 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: agora-project2.12.1112-2011 Remote Shell Upload Google Dork: n0 N0obs Date: 10/06/2012 Exploit Author: Misa3l Vendor Homepage: http://sourceforge.net/projects/agora-project/ Software Link:...

C4B XPhone UC Web 4.1.890S R1 XSS Vulnerability

Exploit for asp platform in category web applications Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und Kommunikationslösung von C4B. Sie ist leicht zu bedienen und...

Tiki Wiki 5.2 CMS Groupware File Disclosure

File disclosure vulnerability in Tiki Wiki CMS Groupware tiki-jsplugin.php language parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

GroupWare epesiBIM CRM 1.2.1 Cross Site Scripting

Title: ====== GroupWare epesiBIM CRM 1.2.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=501 VL-ID: ===== 501 Introduction: ============= epesi BIM stands for Business Information Manager. We just did not like the...

GroupWare epesiBIM 1.2.1 - Multiple Web Vulnerabilities

Document Title: =============== GroupWare epesiBIM 1.2.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=501 Release Date: ============= 2012-04-09 Vulnerability Laboratory ID VL-ID: ==================================== 501...

Egroupware 1.8.002 Cross Site Scripting

Egroupware v1.8.002 processexec.php Reflected Cross-Site Scripting XSS Google Dork: inurl:etemplate/processexec.php Title: Egroupware v1.8.002 processexec.php Remote XSS Vulnerability Type: Remote Author: Marcos Garcia Severity: Medium – CVSS: 5 AV:N/AC:L/Au:N/C:N/I:P/A:N Impact: Direct execution...

Tiki Wiki CMS Groupware - url Open Redirection

Tiki Wiki CMS Groupware - url Open Redirection source: https://www.securityfocus.com/bid/52079/info Tiki Wiki CMS Groupware is prone to a URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other...

Tiki Wiki CMS Groupware Frame Injection

Exploit Title: Tiki Wiki CMS Groupware Frame Injection Date: 17.02.2012 Author: Sony Software Link: http://info.tiki.org/tiki-index.php Google Dorks: inurl:tiki-featuredlink.php?type= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Horde 3.3.12...

Horde Groupware Source Packages Backdoor Vulnerability - Active Check

Horde Groupware is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:horde:hordegroupware";...