CVE-2004-1926

Tiki Wiki CMS Groupware (TikiWiki) <= 1.8.1 is affected by multiple input validation vulnerabilities allowing remote code injection via user profile fields (Theme, Country, Real Name, Displayed time zone) and directory/add-site fields (Name, Description, URL, Country). Connection records indic...

CVE-2004-1926

Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to inject arbitrary code via the 1 Theme, 2 Country, 3 Real Name, or 4 Displayed time zone fields in a User Profile, or the 5 Name, 6 Description, 7 URL, or 8 Country fields in a Directory/Add Site operation...