CVE-2011-4551: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters...

PT-2012-1912

Name of the Vulnerable Software and Affected Versions TikiWiki CMS/Groupware versions prior to 8.2 TikiWiki CMS/Groupware LTS versions prior to 6.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via arbitrary parameters in the...

Tiki Wiki CMS Groupware 8.1 - 'show_errors' HTML Injection

source: https://www.securityfocus.com/bid/51128/info Tiki Wiki CMS Groupware is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the...