Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 2:56 p.m.•17 views

CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

5.4CVSS6.4AI score0.00195EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/23 9:30 p.m.•21 views

EUVD-2024-55496

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

6.4AI score0.00195EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/03/23 12:00 a.m.•32 views

CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

0.00195EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/03/23 12:00 a.m.•13 views

CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

6.4AI score0.00195EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/23 12:00 a.m.•42 views

CVE-2024-46878

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...

0.00195EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•28 views

PT-2026-27195

A Cross-Site Scripting XSS vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions...

6.4AI score0.00195EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•19 views

PT-2026-27196

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-admin system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

6.4AI score0.00195EPSS
SaveExploits1References4
OSV
OSV
•added 2026/03/23 12:00 a.m.•13 views

CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

5.4CVSS6.3AI score
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•44 views

EUVD-2011-4484

Malware in sbrugna...

7.2CVSS7.2AI score0.04271EPSS
SaveExploits7References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-6732

Malware in sbrugna...

5.4CVSS6AI score0.00678EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/22 8:22 a.m.•21 views

CVE-2018-7302

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS...

5.4CVSS6.8AI score0.00551EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/28 12:00 a.m.•19 views

Tiki 安全漏洞

Tiki is a suite of open source content management and portal applications from the Tiki community that can be used to create web applications, portals, corporate intranets, extranets, and more. A security vulnerability exists in Tiki 27.0 and earlier versions, which originates from a user with...

4.8CVSS5.8AI score0.00234EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/14 2:15 a.m.•46 views

CVE-2023-22850

Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call...

8.8CVSS8.9AI score0.01168EPSS
SaveExploits3References2
Prion
Prion
•added 2023/01/14 1:15 a.m.•30 views

Design/Logic Flaw

Tiki before 24.1, when featurecreatewebhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval...

6.5CVSS8.9AI score0.00938EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder