EDB-19630
functionalTiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution (Metasploit)
view exploit source exploit_dbverifiedtype webappsauthor Metasploitpublished 2012-07-09catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-3996US | medium5.0 | Exploit | ||
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3… | ||||
| CVE-2012-0911US | critical9.8 | Exploit | ||
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bann… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan