PT-2004-2822 · Tikiwiki · Tikiwiki Cms/Groupware

Published 2004-04-11 · Updated 2017-07-11 · CVE-2004-1924

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tiki CMS/Groupware (TikiWiki) versions 1.8.1 and earlier

Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters in different PHP files, including the theme parameter to "tiki-switch theme.php", find and priority parameters to "messu-mailbox.php", flag, priority, flagval, sort mode, or find parameters to "messu-read.php", articleId parameter to "tiki-read article.php" and "tiki-print article.php", parentId parameter to "tiki-browse categories.php", comments threshold parameter to "tiki-index.php", galleryId parameter to "tiki-list file gallery.php" and "tiki-upload file.php", faqId parameter to "tiki-view faq.php", chartId parameter to "tiki-view chart.php", or surveyId parameter to "tiki-survey stats survey.php".

Recommendations For Tiki CMS/Groupware (TikiWiki) versions 1.8.1 and earlier, consider disabling access to the vulnerable parameters, such as theme, find, priority, flag, flagval, sort mode, articleId, parentId, comments threshold, galleryId, faqId, chartId, and surveyId, in the respective PHP files until a patch is available. Restrict access to the affected PHP files, including "tiki-switch theme.php", "messu-mailbox.php", "messu-read.php", "tiki-read article.php", "tiki-print article.php", "tiki-browse categories.php", "tiki-index.php", "tiki-list file gallery.php", "tiki-upload file.php", "tiki-view faq.php", "tiki-view chart.php", and "tiki-survey stats survey.php", to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2004-1924

Affected Products

Tikiwiki Cms/Groupware

References · 18

• 🔥 https://exploit-db.com/exploits/23953 · Exploit
• 🔥 https://exploit-db.com/exploits/23957 · Exploit
• 🔥 https://exploit-db.com/exploits/23962 · Exploit
• 🔥 https://exploit-db.com/exploits/23954 · Exploit
• 🔥 https://exploit-db.com/exploits/43809 · Exploit
• 🔥 https://exploit-db.com/exploits/23960 · Exploit
• 🔥 https://exploit-db.com/exploits/23958 · Exploit
• 🔥 http://securityfocus.com/bid/10100 · Exploit
• 🔥 https://exploit-db.com/exploits/23959 · Exploit
• 🔥 https://exploit-db.com/exploits/23961 · Exploit
• 🔥 https://exploit-db.com/exploits/23955 · Exploit
• 🔥 https://exploit-db.com/exploits/23947 · Exploit
• 🔥 https://exploit-db.com/exploits/23956 · Exploit
• http://secunia.com/advisories/11344 · Vendor Advisory
• http://tikiwiki.org/tiki-read_article.php?articleId=66 · Patch