2 matches found
Sql injection
In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-usertasks.php showhistory parameter...
6.5CVSS8.9AI score0.00995EPSS
SaveExploits1References1Affected Software1
CVE-2018-20719: Improper Neutralization of Special Elements used in an SQL Command
In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-usertasks.php showhistory parameter...
8.8CVSS5.8AI score0.00995EPSS
SaveExploits1References2
20