268931
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
This vulnerability is addressed in the following product release:
TikiWiki, TikiWiki, 1.9.8.2
|
CWE-79
Cross-site Scripting
|
CVE-2007-5683
|
2012-10-24 13:00 |
2007-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268932
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in (1) error_handler_file and (2) l…
|
CWE-22
Path Traversal
|
CVE-2007-5684
|
2012-10-24 13:00 |
2007-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268933
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
Multiple unspecified vulnerabilities in TikiWiki before 1.9.9 have unknown impact and attack vectors involving (1) tiki-edit_css.php, (2) tiki-list_games.php, or (3) tiki-g-admin_shared_source.php.
|
NVD-CWE-noinfo
|
CVE-2007-6529
|
2012-10-24 13:00 |
2007-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268934
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter. NOTE: The provenanc…
|
CWE-79
Cross-site Scripting
|
CVE-2006-6162
|
2012-10-24 13:00 |
2006-11-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268935
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters.
|
CWE-79
Cross-site Scripting
|
CVE-2006-6163
|
2012-10-24 13:00 |
2006-11-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268936
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack o…
|
CWE-20
Improper Input Validation
|
CVE-2006-6168
|
2012-10-24 13:00 |
2006-11-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268937
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulne…
|
CWE-20
Improper Input Validation
|
CVE-2005-0200
|
2012-10-24 13:00 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268938
|
- |
|
tiki
|
tikiwiki_cms\/groupware
|
Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2005-3283
|
2012-10-24 13:00 |
2005-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268939
|
- |
|
oracle
|
database_server
|
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2010-0851
|
2012-10-23 12:20 |
2010-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268940
|
- |
|
oracle
|
database_server
|
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown v…
|
NVD-CWE-noinfo
|
CVE-2010-0852
|
2012-10-23 12:20 |
2010-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|