EDB-43809
PoCTikiWiki < 1.8.1 - Multiple Vulnerabilities
Exploit ansehen Quelle exploit_dbTyp webappsAutor GulfTech Securityveröffentlicht 2004-04-11Katalog exploit_db
01
ausgenutzte CVEs (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2004-1925US | high7.5 | Exploit | ||
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1… | ||||
| CVE-2004-1928US | high7.5 | Exploit | ||
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL. | ||||
| CVE-2004-1923US | medium5.0 | Exploit | ||
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-adm… | ||||
| CVE-2004-1924US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1)… | ||||
| CVE-2004-1926US | high7.5 | Exploit | ||
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in… | ||||
| CVE-2004-1927US | medium5.0 | Exploit | ||
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbit… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan