EUVD-2018-13264

Malware in sbrugna...

Tiki User Tasks Module SQL Injection Vulnerability

Tiki is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A SQL injection vulnerability exists in the User Tasks module in versions prior to Tiki 17.2,...

CVE-2018-20719

In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-usertasks.php showhistory parameter...