Cross site scripting

Multiple cross-site scripting vulnerabilities in Tiki 7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to 1 tiki-adminsystem.php, 2 tiki-pagehistory.php, 3 tiki-removepage.php, or 4 tiki-renamepage.php...

CVE-2011-4455

Multiple cross-site scripting vulnerabilities in Tiki 7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to 1 tiki-adminsystem.php, 2 tiki-pagehistory.php, 3 tiki-removepage.php, or 4 tiki-renamepage.php...

CVE-2011-4455

CVE-2011-4455: Multiple XSS vulnerabilities in Tiki Wiki CMS Groupware up to version 7.2 and earlier allow remote attackers to inject arbitrary scripts via the path info to tiki-admin_system.php, tiki-pagehistory.php, tiki-removepage.php, or tiki-rename_page.php. Affected software is Tiki 6/7 ser...

CVE-2011-4454

Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to 1 tiki-remindpassword.php, 2 tiki-index.php, 3 tiki-loginscr.php, or 4 tiki-index...

CVE-2011-4454

The CVE-2011-4454 entry corresponds to multiple XSS vulnerabilities in Tiki Wiki CMS Groupware, affected through path-info in 8.0 RC1 and earlier (tiki-remind_password.php, tiki-index.php, tiki-login_scr.php, tiki-index). The root cause is improper handling of path input leading to injection of a...

Tiki Wiki CMS Groupware cross-site scripting vulnerability (CNVD-2019-39359)

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site scripting vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which stems from a lack of proper validation of client-side data in the web application and can be exploited ...

Tiki Wiki CMS Groupware File Inclusion Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A file inclusion vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which can be exploited by an attacker to include arbitrary files...

Tiki Wiki CMS Groupware Cross-Site Request Forgery Vulnerability

Tiki Wiki CMS Groupware is a Wiki-based open source content management system and online office suite . A cross-site request forgery vulnerability exists in Tiki Wiki CMS Groupware version 5.2, which arises from a WEB application that does not adequately validate that a request is coming from a...

CVE-2010-4241

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

CVE-2010-4240

Tiki Wiki CMS Groupware 5.2 has XSS...

Design/Logic Flaw

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

Cross site scripting

Tiki Wiki CMS Groupware 5.2 has XSS...

Cross site request forgery (csrf)

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

CVE-2010-4239

Tiki Wiki CMS Groupware 5.2 is affected by a Local File Inclusion (LFI) vulnerability (CVE-2010-4239). The Nuclei template confirms the issue in Tiki Wiki CMS Groupware 5.2, describing how an LFI flaw can lead to unauthorized access to sensitive files. Impact is stated as exposing sensitive infor...

CVE-2010-4240

Tiki Wiki CMS Groupware 5.2 has XSS...

CVE-2010-4240

The CVE-2010-4240 entry concerns Tiki Wiki CMS Groupware 5.2 with a cross-site scripting (XSS) vulnerability. The connected records indicate an XSS flaw arising from insufficient validation of client-side data in the web application, enabling execution of injected script. No exploit details, affe...

CVE-2010-4241

Tiki Wiki CMS Groupware 5.2 has CSRF...

CVE-2010-4241

CVE-2010-4241 concerns Tiki Wiki CMS Groupware 5.2, where the web application is vulnerable to a Cross-Site Request Forgery (CSRF) due to insufficient validation of request origin. The vulnerability allows an attacker to induce a user to perform unintended actions on a trusted site, potentially i...