CVE-2010-1135
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user...
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
Exploit likelihood
What each source reports
NVD Score used
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
- Record
CVE-2010-1135- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
- Record
CVE-2010-1135- Updated
- 2026-11-02
EUVDEUVD-2010-1166 No score
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
- Record
EUVD-2010-1166- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f99m-975w-789r No score
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user...
The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user login cookies, which allows remote attackers to gain access via cookie reuse.
- Record
GHSA-f99m-975w-789r- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1135 is a high vulnerability (CVSS 7.5) in Tiki Tikiwiki Cms\/groupware, published March 26, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 75th percentile. No source names a fixed version.
References
securityfocus.com/bid/38608
info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases
secunia.com/advisories/38896
tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25046
exchange.xforce.ibmcloud.com/vulnerabilities/56770
nvd.nist.gov/vuln/detail/CVE-2010-1135
github.com/advisories/GHSA-f99m-975w-789r