İçeriğe atla
Noroxi

Tiki kayıtları

tiki üreticisine ait 91 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
6 · %6,6
Pre-auth RCE
18
Düzeltme kaydı olan
%2,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

91 kayıt
  • CVE-2012-0911
    60Bu hafta

    TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object i

    KritikCVSS 9,8SilahlaştırılmışEPSS %62

    tiki · tikiwiki cms\/groupware12 Tem 2012

  • CVE-2025-34111
    60Bu hafta

    Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE

    KritikCVSS 9,3SilahlaştırılmışEPSS %2

    tiki · tikiwiki cms\/groupware15 Tem 2025

  • CVE-2005-1921
    54Planlayın

    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1

    YüksekCVSS 7,5SilahlaştırılmışEPSS %79

    php · xml rpc5 Tem 2005

  • CVE-2007-5423
    53Planlayın

    tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which

    YüksekCVSS 7,5SilahlaştırılmışEPSS %76

    tiki · tikiwiki cms\/groupware12 Eki 2007

  • CVE-2020-15906
    47Planlayın

    tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    tiki · tiki22 Eki 2020

  • CVE-2006-4602
    43Planlayın

    Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP cod

    YüksekCVSS 7,5SilahlaştırılmışEPSS %44

    tiki · tikiwiki cms\/groupware6 Eyl 2006

  • CVE-2010-4239
    43Planlayın

    Tiki Wiki CMS Groupware 5.2 has Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    tiki · tikiwiki cms\/groupware28 Eki 2019

  • CVE-2007-6529
    41Planlayın

    Multiple unspecified vulnerabilities in TikiWiki before 1.9.9 have unknown impact and attack vectors involving (1) tiki-edit_css.php, (2) ti

    KritikCVSS 10,0İstismar yokEPSS %1

    tiki · tikiwiki cms\/groupware27 Ara 2007

  • CVE-2006-5702
    40Planlayın

    Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1)

    OrtaCVSS 5,0SilahlaştırılmışEPSS %53

    tiki · tikiwiki cms\/groupware3 Kas 2006

  • CVE-2008-3653
    40Planlayın

    Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %1

    tiki · tikiwiki cms\/groupware12 Ağu 2008

  • CVE-2020-29254
    35İzleyin

    TikiWiki 21.2 allows templates to be edited without CSRF protection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    tiki · tikiwiki cms\/groupware11 Ara 2020

  • CVE-2018-7304
    35İzleyin

    Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window

    YüksekCVSS 8,8İstismar yokEPSS %1

    tiki · tiki21 Şub 2018

  • CVE-2023-22850
    35İzleyin

    Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call.

    YüksekCVSS 8,8İstismar yokEPSS %1

    tiki · tiki13 Oca 2023

  • CVE-2018-20719
    35İzleyin

    In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.

    YüksekCVSS 8,8İstismar yokEPSS %0

    tiki · tikiwiki cms\/groupware15 Oca 2019

  • CVE-2023-22853
    35İzleyin

    Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval.

    YüksekCVSS 8,8İstismar yokEPSS %0

    tiki · tiki13 Oca 2023

  • CVE-2010-4241
    35İzleyin

    Tiki Wiki CMS Groupware 5.2 has CSRF

    YüksekCVSS 8,8İstismar yokEPSS %0

    tiki · tikiwiki cms\/groupware28 Eki 2019

  • CVE-2004-1926
    32İzleyin

    Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Na

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    tiki · tikiwiki cms\/groupware11 Nis 2004

  • CVE-2017-14925
    32İzleyin

    Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS b

    YüksekCVSS 8,0İstismar yokEPSS %0

    tiki · tikiwiki cms\/groupware29 Eyl 2017

  • CVE-2017-14924
    32İzleyin

    Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS b

    YüksekCVSS 8,0İstismar yokEPSS %0

    tiki · tikiwiki cms\/groupware29 Eyl 2017

  • CVE-2004-1928
    31İzleyin

    The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    tiki · tikiwiki cms\/groupware12 Nis 2004

  • CVE-2007-5684
    31İzleyin

    Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files v

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    tiki · tikiwiki cms\/groupware26 Eki 2007

  • CVE-2005-1925
    31İzleyin

    Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands vi

    YüksekCVSS 7,5İstismar yokEPSS %2

    tiki · tikiwiki cms\/groupware18 Kas 2005

  • CVE-2007-5682
    31İzleyin

    Incomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki before 1.9.8.2 allows remote attackers to execute arbitrary code by

    YüksekCVSS 7,5İstismar yokEPSS %2

    tiki · tikiwiki cms\/groupware26 Eki 2007

  • CVE-2005-0200
    31İzleyin

    TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to

    YüksekCVSS 7,5İstismar yokEPSS %2

    tiki · tikiwiki cms\/groupware2 May 2005

  • CVE-2006-6168
    31İzleyin

    tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separa

    YüksekCVSS 7,5İstismar yokEPSS %2

    tiki · tikiwiki cms\/groupware28 Kas 2006