649 matches found
Tiki Wiki CMS Groupware < 1.7.8 'tiki-error.php' XSS Vulnerabilities
Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Tiki Wiki CMS Groupware Multiple Unspecified Remote Vulnerabilities
Tiki Wiki CMS Groupware is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Tiki Wiki CMS Groupware < 1.8.2 Multiple Input Validation Vulnerabilities
Tiki Wiki CMS Groupware is prone to multiple vulnerabilities in various modules of the application. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
security flaw
Eval injection vulnerability in PEAR XMLRPC 1.3.0 and earlier aka XML-RPC or xmlrpc and PHPXMLRPC aka XML-RPC For PHP or php-xmlrpc 1.1 and earlier, as used in products such as 1 WordPress, 2 Serendipity, 3 Drupal, 4 egroupware, 5 MailWatch, 6 TikiWiki, 7 phpWebSite, 8 Ampache, and others, allows...
CVE-2004-1925
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sortmode parameter in 1 tiki-usermenu.php, 2 tiki-listfilegallery.php, 3 tiki-directoryranking.php, 4 tiki-browsecategories.php, 5 tiki-index.ph...
CVE-2004-1927
Directory traversal vulnerability in the map feature tiki-map.phtml in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. dot dot sequences in the mapfile parameter...
CVE-2004-1928
CVE-2004-1928 affects Tiki Wiki CMS Groupware (TikiWiki) up to version 1.8.1. The issue is in the image upload feature, where remote attackers can upload and potentially execute arbitrary files via the img/wiki_up URL. The vulnerability is remote, over the network, and contributes to partial conf...
CVE-2004-1923
CVE-2004-1923 affects Tiki Wiki CMS Groupware prior to 1.8.2 (specifically = 1.8.2).
CVE-2004-1926
Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to inject arbitrary code via the 1 Theme, 2 Country, 3 Real Name, or 4 Displayed time zone fields in a User Profile, or the 5 Name, 6 Description, 7 URL, or 8 Country fields in a Directory/Add Site operation...
CVE-2004-1923
Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to 1 bannerclick.php, 2 categorize.php, 3 tiki-adminincludedirectory.php, 4 tiki-directorysearch.php, which reveal the web server path in an error message...
CVE-2004-1927
The CVE-2004-1927 issue affects Tiki Wiki CMS Groupware (TikiWiki) up to version 1.8.1. It is a directory traversal vulnerability in the map feature (tiki-map.phtml) that lets remote attackers determine the existence of arbitrary files via .. sequences in the mapfile parameter. The vulnerability ...
CVE-2004-1926
Tiki Wiki CMS Groupware (TikiWiki) <= 1.8.1 is affected by multiple input validation vulnerabilities allowing remote code injection via user profile fields (Theme, Country, Real Name, Displayed time zone) and directory/add-site fields (Name, Description, URL, Country). Connection records indic...
CVE-2004-1924
Multiple cross-site scripting XSS vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the 1 theme parameter to tiki-switchtheme.php, 2 find and priority parameters to messu-mailbox.php, 3 flag, priority, flagval,...
CVE-2004-1924
CVE-2004-1924 concerns multiple XSS vulnerabilities in Tiki Wiki CMS Groupware (TikiWiki) up to version 1.8.1. The affected surface includes numerous parameters across different pages (theme, messu-*.php, tiki-read_article.php, tiki-browse_categories.php, tiki-index.php, tiki-print_article.php, t...
CVE-2004-1925
CVE-2004-1925 affects Tiki Wiki CMS Groupware (TikiWiki)
CVE-2004-1928
The image upload feature in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wikiup URL...
CVE-2004-1926: Improper Control of Generation of Code
Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to inject arbitrary code via the 1 Theme, 2 Country, 3 Real Name, or 4 Displayed time zone fields in a User Profile, or the 5 Name, 6 Description, 7 URL, or 8 Country fields in a Directory/Add Site operation...
CVE-2004-1928: Improper Input Validation
The image upload feature in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wikiup URL...
CVE-2004-1925: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sortmode parameter in 1 tiki-usermenu.php, 2 tiki-listfilegallery.php, 3 tiki-directoryranking.php, 4 tiki-browsecategories.php, 5 tiki-index.ph...
CVE-2004-1923: Exposure of Sensitive Information to an Unauthorized Actor
Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to 1 bannerclick.php, 2 categorize.php, 3 tiki-adminincludedirectory.php, 4 tiki-directorysearch.php, which reveal the web server path in an error message...