571 matches found
CVE-2006-6168
tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."...
CVE-2006-6168
CVE-2006-6168 affects TikiWiki (tiki-register.php) versions before 1.9.7. The issue arises from insufficient validation of the email field, allowing remote attackers to trigger “notification-spam” via vectors such as a comma-separated list of addresses. The NVD lists a base score of 7.5 (HIGH) wi...
CVE-2006-4299
Cross-site scripting XSS vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
CVE-2006-2635
Multiple cross-site scripting XSS vulnerabilities in Tikiwiki aka Tiki CMS/Groupware 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "ipt" in 1 offset and 2 days parameters in a tiki-lastchanges.php, the 3 find and 4 offset parameters in ...
CVE-2006-2635
CVE-2006-2635 (and related entries) describe multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki/Tiki CMS/Groupware 1.9.x. The enriched records from connected sources confirm concrete details: the issues affect tiki-remind_password.php and a wide set of other PHP scripts (e.g., tiki-l...
Multiple XSS Vulnerabilities in Tikiwiki 1.9.x
Multiple XSS Vulnerabilities in Tikiwiki 1.9.x Discovered by Blwood http://www.blwood.net Public ------------- Tiki-lastchanges http://www.site.com/tiki-lastchanges.php?days=3&offset=223E3Cscr3Cscript3Eipt3Ealert'Blwood'3C/scr3C/script3Eipt3E...
CVE-2005-1925
Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via 1 the suckurl parameter to tiki-editpage.php or 2 language parameter to tiki-userpreferences.php...
TikiWiki < 1.8.6 / 1.9.1 Multiple Vulnerabilities
The remote host is running TikiWiki, an open source wiki application written in PHP. The version of TikiWiki installed on the remote host fails to sanitize input to the 'language' parameter of the 'tiki-userpreferences.php' script before using it in a PHP 'include' function. An authenticated...
Tiki Wiki CMS Groupware < 1.7.8 'tiki-error.php' XSS Vulnerabilities
Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Tiki Wiki CMS Groupware Multiple Unspecified Remote Vulnerabilities
Tiki Wiki CMS Groupware is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Tiki Wiki CMS Groupware < 1.8.2 Multiple Input Validation Vulnerabilities
Tiki Wiki CMS Groupware is prone to multiple vulnerabilities in various modules of the application. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
security flaw
Eval injection vulnerability in PEAR XMLRPC 1.3.0 and earlier aka XML-RPC or xmlrpc and PHPXMLRPC aka XML-RPC For PHP or php-xmlrpc 1.1 and earlier, as used in products such as 1 WordPress, 2 Serendipity, 3 Drupal, 4 egroupware, 5 MailWatch, 6 TikiWiki, 7 phpWebSite, 8 Ampache, and others, allows...
CVE-2004-1927
Directory traversal vulnerability in the map feature tiki-map.phtml in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. dot dot sequences in the mapfile parameter...
CVE-2004-1925
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sortmode parameter in 1 tiki-usermenu.php, 2 tiki-listfilegallery.php, 3 tiki-directoryranking.php, 4 tiki-browsecategories.php, 5 tiki-index.ph...
CVE-2004-1928
CVE-2004-1928 affects Tiki Wiki CMS Groupware (TikiWiki) up to version 1.8.1. The issue is in the image upload feature, where remote attackers can upload and potentially execute arbitrary files via the img/wiki_up URL. The vulnerability is remote, over the network, and contributes to partial conf...
CVE-2004-1923
Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to 1 bannerclick.php, 2 categorize.php, 3 tiki-adminincludedirectory.php, 4 tiki-directorysearch.php, which reveal the web server path in an error message...
CVE-2004-1926
Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to inject arbitrary code via the 1 Theme, 2 Country, 3 Real Name, or 4 Displayed time zone fields in a User Profile, or the 5 Name, 6 Description, 7 URL, or 8 Country fields in a Directory/Add Site operation...
CVE-2004-1923
CVE-2004-1923 affects Tiki Wiki CMS Groupware prior to 1.8.2 (specifically = 1.8.2).
CVE-2004-1926
Tiki Wiki CMS Groupware (TikiWiki) <= 1.8.1 is affected by multiple input validation vulnerabilities allowing remote code injection via user profile fields (Theme, Country, Real Name, Displayed time zone) and directory/add-site fields (Name, Description, URL, Country). Connection records indic...
CVE-2004-1927
The CVE-2004-1927 issue affects Tiki Wiki CMS Groupware (TikiWiki) up to version 1.8.1. It is a directory traversal vulnerability in the map feature (tiki-map.phtml) that lets remote attackers determine the existence of arbitrary files via .. sequences in the mapfile parameter. The vulnerability ...