GCVE - cpe:2.3:a:tiki:tikiwiki_cms\/groupware:3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tiki:tikiwiki_cms\/groupware:3.4:*:*:*:*:*:*:*

part: a version: 3.4 update: *

Vendor	Tiki (`24bbaada-1700-5f6a-a2ab-a828256fb1ae`)
Product	Tikiwiki Cms/Groupware (`7ec6b5cf-a49f-535b-b1ef-2c14db8103b4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-3996`	vulnerable	2026-06-08 05:02:15.433261	Details available TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php. Published: 2012-07-12T19:00:00.000Z Updated: 2024-09-17T02:16:33.580Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/19630 http://www.exploit-db.com/exploits/19573 http://www.osvdb.org/83533 http://info.tiki.org/article191-Tiki-Releases-8-4 http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4551`	vulnerable	2026-06-08 04:59:31.839347	Details available Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters. Published: 2012-10-01T00:00:00.000Z Updated: 2024-09-17T04:10:00.054Z Open on db.gcve.eu Reference links http://secunia.com/advisories/47278 http://info.tiki.org/article183-Tiki-Wiki-CMS-Groupware-8-2-and-6-5LTS-Security-Patches-Available http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-07.txt http://www.osvdb.org/77966	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1136`	vulnerable	2026-06-08 04:54:05.391479	Details available The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php. Published: 2010-03-26T21:00:00.000Z Updated: 2024-08-07T01:14:05.731Z Open on db.gcve.eu Reference links http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25196 http://www.securityfocus.com/bid/38608 http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases http://osvdb.org/62801 https://exchange.xforce.ibmcloud.com/vulnerabilities/56771	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1134`	vulnerable	2026-06-08 04:54:05.390521	Details available SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable. Published: 2010-03-26T21:00:00.000Z Updated: 2024-08-07T01:14:06.152Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/38608 http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases http://osvdb.org/62800 http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25429 https://exchange.xforce.ibmcloud.com/vulnerabilities/56769	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.