PT-2007-7363 · Tikiwiki · Tikiwiki

Jesus Olmos Gonzalez · Published 2007-12-27 · Updated 2012-10-24 · CVE-2007-6529

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TikiWiki versions prior to 1.9.9

Description The issue involves multiple unspecified vulnerabilities in TikiWiki. These vulnerabilities have unknown impact and attack vectors, specifically involving the following endpoints: "tiki-edit css.php", "tiki-list games.php", or "tiki-g-admin shared source.php".

Recommendations For versions prior to 1.9.9, update to version 1.9.9 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-6529

Affected Products

Tikiwiki

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-6529 · Security Note
• http://security.gentoo.org/glsa/glsa-200801-10.xml · Vendor Advisory
• http://secunia.com/advisories/28225 · Vendor Advisory
• http://secunia.com/advisories/28602 · Note
• http://osvdb.org/41176 · Note
• http://osvdb.org/41175 · Note
• http://osvdb.org/41177 · Note
• http://tikiwiki.org/ReleaseProcess199 · Note