GCVE - cpe:2.3:a:tiki:tikiwiki_cms\/groupware:16.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tiki:tikiwiki_cms\/groupware:16.2:*:*:*:*:*:*:*

part: a version: 16.2 update: *

Vendor	Tiki (`24bbaada-1700-5f6a-a2ab-a828256fb1ae`)
Product	Tikiwiki Cms/Groupware (`7ec6b5cf-a49f-535b-b1ef-2c14db8103b4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9305`	vulnerable	2026-06-08 05:10:09.595962	Details available lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via padded zero characters, as demonstrated by an attack on tiki-batch_send_newsletter.php. Published: 2017-05-31T03:54:00.000Z Updated: 2024-08-05T17:02:44.132Z Open on db.gcve.eu Reference links https://github.com/tikiorg/tiki/commit/6c016e8f066d2f404b18eaa1af7fa0c7a9651ccd https://www.cdxy.me/?p=763	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9145`	vulnerable	2026-06-08 05:10:09.404310	Details available TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS. Published: 2017-06-26T13:00:00.000Z Updated: 2024-08-05T16:55:22.354Z Open on db.gcve.eu Reference links https://sourceforge.net/p/tikiwiki/code/62386	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14925`	vulnerable	2026-06-08 05:08:57.622221	Details available Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to edit global permissions if an administrator opens a wiki page with an IMG element, related to tiki-objectpermissions.php. For example, an attacker could assign administrator privileges to every unauthenticated user of the site. Published: 2017-09-29T07:00:00.000Z Updated: 2024-08-05T19:42:22.248Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2017/09/28/13 https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released https://sourceforge.net/p/tikiwiki/code/63872	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14924`	vulnerable	2026-06-08 05:08:57.620844	Details available Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with an IMG element, related to tiki-assignuser.php. Published: 2017-09-29T07:00:00.000Z Updated: 2024-08-05T19:42:22.171Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2017/09/28/13 https://tiki.org/article449-Security-and-bug-fix-updates-Tiki-17-1-Tiki-16-3-15-5-and-Tiki-12-12-released https://sourceforge.net/p/tikiwiki/code/63829	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.