EDB-43809
PoCTikiWiki < 1.8.1 - Multiple Vulnerabilities
view exploit source exploit_dbtype webappsauthor GulfTech Securitypublished 2004-04-11catalog exploit_db
01
exploited CVEs (6)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2004-1925US | high7.5 | Exploit | ||
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1… | ||||
| CVE-2004-1928US | high7.5 | Exploit | ||
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL. | ||||
| CVE-2004-1923US | medium5.0 | Exploit | ||
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-adm… | ||||
| CVE-2004-1924US | medium4.3 | Exploit | ||
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1)… | ||||
| CVE-2004-1926US | high7.5 | Exploit | ||
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in… | ||||
| CVE-2004-1927US | medium5.0 | Exploit | ||
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbit… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan