Tiki Tikiwiki CMS/Groupware 1.9.8
Approved changes feed: RSS · Atom
cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.8:*:*:*:*:*:*:*
part: a version: 1.9.8 update: *
| Vendor | Tiki (24bbaada-1700-5f6a-a2ab-a828256fb1ae) |
|---|---|
| Product | Tikiwiki Cms/Groupware (7ec6b5cf-a49f-535b-b1ef-2c14db8103b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3654 |
vulnerable | 2026-06-08 04:50:35.851747 |
Details available
Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors.
Published: 2008-08-13T01:00:00.000Z
Updated: 2024-08-07T09:45:18.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3653 |
vulnerable | 2026-06-08 04:50:35.850587 |
Details available
Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors.
Published: 2008-08-13T01:00:00.000Z
Updated: 2024-08-07T09:45:18.939Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5684 |
vulnerable | 2026-06-08 04:50:06.715818 |
Details available
Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in (1) error_handler_file and (2) local_php parameters to (a) tiki-index.php, or (3) encoded "..%2F" sequences in the imp_language parameter to tiki-imexport_languages.php.
Published: 2007-10-26T18:00:00.000Z
Updated: 2024-08-07T15:39:13.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5683 |
vulnerable | 2026-06-08 04:50:06.715183 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to the password reminder page (tiki-remind_password.php), (2) IMG tags in wiki pages, and (3) the local_php parameter to db/tiki-db.php.
Published: 2007-10-26T18:00:00.000Z
Updated: 2024-08-07T15:39:13.533Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5423 |
vulnerable | 2026-06-08 04:50:05.987902 |
Details available
tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.
Published: 2007-10-12T23:00:00.000Z
Updated: 2024-08-07T15:31:58.501Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2635 |
vulnerable | 2026-06-08 04:49:07.168620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.