GCVE - cpe:2.3:a:tiki:tikiwiki_cms\/groupware:16.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tiki:tikiwiki_cms\/groupware:16.0:*:*:*:*:*:*:*

part: a version: 16.0 update: *

Vendor	Tiki (`24bbaada-1700-5f6a-a2ab-a828256fb1ae`)
Product	Tikiwiki Cms/Groupware (`7ec6b5cf-a49f-535b-b1ef-2c14db8103b4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9145`	vulnerable	2026-06-08 05:10:09.403031	Details available TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS. Published: 2017-06-26T13:00:00.000Z Updated: 2024-08-05T16:55:22.354Z Open on db.gcve.eu Reference links https://sourceforge.net/p/tikiwiki/code/62386	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14925`	vulnerable	2026-06-08 05:08:57.622188	Details available Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, related to tiki-objectpermissions.php. For example, an attacker could assign administrator privileges to every unauthenticated user of the site. Published: 2017-09-29T07:00:00.000Z Updated: 2024-08-05T19:42:22.248Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2017/09/28/13 https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released https://sourceforge.net/p/tikiwiki/code/63872	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14924`	vulnerable	2026-06-08 05:08:57.619683	Details available Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php. Published: 2017-09-29T07:00:00.000Z Updated: 2024-08-05T19:42:22.171Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2017/09/28/13 https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released https://sourceforge.net/p/tikiwiki/code/63829	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9889`	vulnerable	2026-06-08 05:08:24.925016	Details available Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS. Published: 2016-12-23T05:00:00.000Z Updated: 2024-08-06T03:07:30.869Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/95083 http://www.securitytracker.com/id/1037531 https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.