Skip to contentTiki Tikiwiki Cms\/groupware vulnerabilities
- tiki software community association wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCECVE-2025-34111Public exploit9.3 Critical
- tiki tikiwiki cms\/groupwareTikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the...CVE-2021-365515.4 Medium
- tiki tikiwiki cms\/groupwareTikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the...CVE-2021-365505.4 Medium
- tiki tikiwiki cms\/groupwareTikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an...CVE-2020-29254Public exploit8.8 High
- tiki-wiki groupware cms, tiki tikiwiki cms\/groupware +1 moreCross Site Scripting (XSS) flaws found in Tiki-Wiki CMS softwareCVE-2020-89666.5 Medium
- tiki, tiki tikiwiki cms\/groupware +1 moreA Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id...CVE-2013-60226.1 Medium
- tiki wiki cms groupware, tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.CVE-2011-4336Public exploit6.1 Medium
- tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 5.2 has Local File InclusionCVE-2010-4239EPSS 13.4%9.8 Critical
- tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 5.2 has XSSCVE-2010-42406.1 Medium
- tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 moreTiki Wiki CMS Groupware 5.2 has CSRFCVE-2010-42418.8 High
- tiki tikiwiki cms\/groupwaretiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is...CVE-2019-153145.4 Medium
- tiki tikiwiki cms\/groupwareIn Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki...CVE-2018-207198.8 High
- tiki tikiwiki cms\/groupwareStored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user...CVE-2018-148505.4 Medium
- tiki tikiwiki cms\/groupwareTiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser...CVE-2018-148495.4 Medium
- tiki tikiwiki cms\/groupwareCross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1.CVE-2018-72905.4 Medium
- tiki tikiwiki cms\/groupwareThe Calendar component in Tiki 17.1 allows HTML injection.CVE-2018-73035.4 Medium
- tiki tikiwiki cms\/groupwareAn XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain...CVE-2018-71885.4 Medium
- tiki tikiwiki cms\/groupwaretiki wiki cms groupware <=15.2 has a xss vulnerability, allow attackers steal user's cookie.CVE-2016-73946.1 Medium
- tiki tikiwiki cms\/groupwareCross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before...CVE-2017-149258.0 High
- tiki tikiwiki cms\/groupwareCross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before...CVE-2017-149248.0 High
- tiki tikiwiki cms\/groupwareTikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the...CVE-2017-91456.1 Medium
- tiki tikiwiki cms\/groupwarelib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to...CVE-2017-93056.1 Medium
- tiki tikiwiki cms\/groupwareA vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a...CVE-2016-101437.5 High
- tiki tikiwiki cms\/groupwareSome forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10...CVE-2016-98896.1 Medium
- tiki tikiwiki cms\/groupwareSQL injection vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS,...CVE-2013-47157.5 High
- tiki tikiwiki cms\/groupwareTiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerabilityCVE-2013-4714Fix available4.3 Medium
- tiki tikiwiki cms\/groupwaretiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary...CVE-2012-5321Public exploitEPSS 13.8%5.8 Medium
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before...CVE-2011-4551Public exploit4.3 Medium
- tiki tikiwiki cms\/groupwareTikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path...CVE-2012-3996Public exploit5.0 Medium
- tiki tikiwiki cms\/groupwareTikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary...CVE-2012-0911Public exploitEPSS 63.0%9.8 Critical
- tiki tikiwiki cms\/groupwareThe Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to...CVE-2010-11367.5 High
- tiki tikiwiki cms\/groupwareThe user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user...CVE-2010-11357.5 High
- tiki tikiwiki cms\/groupwareSQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x...CVE-2010-11347.5 High
- tiki tikiwiki cms\/groupwareMultiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote...CVE-2010-11337.5 High
- tiki tikiwiki cms\/groupwareTikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with...CVE-2003-15747.5 High
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote...CVE-2009-1204Public exploit4.3 Medium
- tiki tikiwiki cms\/groupwareUnspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to...CVE-2008-53195.0 Medium
- tiki tikiwiki cms\/groupwareUnspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to...CVE-2008-53185.0 Medium
- tiki tikiwiki cms\/groupwareUnspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path...CVE-2008-36545.0 Medium
- tiki tikiwiki cms\/groupwareMultiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and...CVE-2008-365310.0 High
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki before 1.9.10.1...CVE-2008-10474.3 Medium
- tiki tikiwiki cms\/groupwareMultiple unspecified vulnerabilities in TikiWiki before 1.9.9 have unknown impact and attack...CVE-2007-652910.0 High
- tiki tikiwiki cms\/groupwareDirectory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote...CVE-2007-6528Public exploit5.0 Medium
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in tiki-special_chars.php in TikiWiki before 1.9.9...CVE-2007-65264.3 Medium
- tiki tikiwiki cms\/groupwareMultiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote...CVE-2007-5684Public exploit7.5 High
- tiki tikiwiki cms\/groupwareMultiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote...CVE-2007-56834.3 Medium
- tiki tikiwiki cms\/groupwareIncomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki before 1.9.8.2 allows...CVE-2007-56827.5 High
- tiki tikiwiki cms\/groupwaretiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via...CVE-2007-5423Public exploitEPSS 76.7%7.5 High
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS...CVE-2007-45544.3 Medium
- tiki tikiwiki cms\/groupwaretiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers...CVE-2006-64575.0 Medium
- Show moreLoading…