EDB-2701
functionalTikiWiki 1.9.5 Sirius - 'sort_mode' Information Disclosure
view exploit source exploit_dbverifiedtype webappsauthor securfrogpublished 2006-11-01catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2006-5702US | medium5.0 | Exploit | ||
Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1) tiki-listpages.php, (2) tiki-lastchange… | ||||
| CVE-2006-5703US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan