CVE-2010-1136
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to...
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
Exploit likelihood
What each source reports
NVD Score used
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
- Record
CVE-2010-1136- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
- Record
CVE-2010-1136- Updated
- 2026-11-02
EUVDEUVD-2010-1167 No score
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
- Record
EUVD-2010-1167- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-465j-xpgg-p3vr No score
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to...
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
- Record
GHSA-465j-xpgg-p3vr- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1136 is a high vulnerability (CVSS 7.5) in Tiki Tikiwiki Cms\/groupware, published March 26, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. No source names a fixed version.
References
tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25196
securityfocus.com/bid/38608
info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases
osvdb.org/62801
exchange.xforce.ibmcloud.com/vulnerabilities/56771
secunia.com/advisories/38882
nvd.nist.gov/vuln/detail/CVE-2010-1136
github.com/advisories/GHSA-465j-xpgg-p3vr