Tiki Wiki CMS Groupware 5.2 - Local File Inclusion

Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability. id: CVE-2010-4239 info: name: Tiki Wiki CMS Groupware 5.2 - Local File Inclusion author: 0xakoko severity: critical description: Tiki Wiki CMS Groupware 5.2 is susceptible to a local file inclusion vulnerability...

CVE-2025-34111: Unrestricted Upload of File with Dangerous Type

An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector connector.minimal.php, which allows remote attackers to upload and execute malicious PHP scripts in the context of the web server. The...

📄 Tiki Wiki CMS Groupware 28.3 Server-Side Template Injection

Tiki Wiki CMS Groupware versions 28.3 and below suffer from two server-side template injection vulnerabilities via specially crafted wiki pages. ---------------------------------------------------------------------------------- Tiki Wiki CMS Groupware '" The second vulnerability can be leveraged ...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

Tiki Wiki CMS Groupware < 21.12, 22.0 < 24.8, 25.0 < 27.2, 28.0 < 28.3 Code Injection Vulnerability

Tiki Wiki CMS Groupware is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tiki Wiki CMS Groupware < 28.0 Multiple Vulnerabilities

Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tiki Wiki CMS Groupware 25.0 Cross Site Request Forgery

------------------------------------------------------------------------------ Tiki Wiki CMS Groupware = 25.0 Two Cross-Site Request Forgery Vulnerabilities ------------------------------------------------------------------------------ - Software Link: https://tiki.org - Affected Versions: Versio...

Tiki Wiki CMS Groupware 24.0 structlib.php Code Execution

-------------------------------------------------------------------------------- Tiki Wiki CMS Groupware = 24.0 structlib.php PHP Code Injection Vulnerability -------------------------------------------------------------------------------- - Software Link: https://tiki.org - Affected Versions:...

Tiki Wiki CMS Groupware Cross-Site Scripting Vulnerability (CNVD-2020-35520)

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site scripting vulnerability exists in php pages in Tiki Wiki CMS Groupware version 20.0 and earlier. The vulnerability stems from a lack of proper validation of client-side data in the...

PT-2020-7137

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 7.0 Description The issue concerns a cross-site scripting XSS problem. It occurs via the GET "ajax" parameter to the "snarf ajax.php" endpoint. This allows for potential exploitation. Recommendations For Tiki Wi...

CVE-2011-4336: Improper Neutralization of Input During Web Page Generation

Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarfajax.php...

Tiki Wiki CMS Groupware cross-site scripting vulnerability (CNVD-2019-39359)

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site scripting vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which stems from a lack of proper validation of client-side data in the web application and can be exploited ...

Cross site request forgery (csrf)

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

CVE-2010-4239: Improper Input Validation

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

PT-2019-6585

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 5.2 Description The issue is related to a CSRF problem. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploite...

PT-2019-6584

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 5.2 Description The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to...

PT-2019-6583

Name of the Vulnerable Software and Affected Versions Tiki Wiki CMS Groupware version 5.2 Description The issue is related to Local File Inclusion. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

Tiki Wiki CMS Groupware < 17.2 SQLi Vulnerability

Tiki Wiki CMS Groupware is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tiki Wiki CMS Groupware < 18.1 XSS Vulnerability

Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...