Approved changes feed: RSS · Atom

cpe:2.3:a:tiki:tikiwiki_cms\/groupware:12.1:*:*:*:*:*:*:*

part: a version: 12.1 update: *

VendorTiki (24bbaada-1700-5f6a-a2ab-a828256fb1ae)
ProductTikiwiki Cms/Groupware (7ec6b5cf-a49f-535b-b1ef-2c14db8103b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9145 vulnerable 2026-06-08 05:10:09.392462 Details available
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
Published: 2017-06-26T13:00:00.000Z
Updated: 2024-08-05T16:55:22.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9889 vulnerable 2026-06-08 05:08:24.919072 Details available
Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS.
Published: 2016-12-23T05:00:00.000Z
Updated: 2024-08-06T03:07:30.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.