PT-2020-7537 · Unknown · Tikiwiki Cms/Groupware

Published 2020-02-12 · Updated 2020-02-18 · CVE-2013-6022

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Tiki Wiki CMG Groupware version 11.0

Description: A Cross-Site Scripting (XSS) issue exists via the id parameter, specifically with paraZeroClipboard.swf, which could allow a remote malicious user to execute arbitrary code.

Recommendations: For Tiki Wiki CMG Groupware version 11.0, consider disabling the paraZeroClipboard.swf component to minimize the risk of exploitation until a patch is available.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-6022

Affected Products

Tikiwiki Cms/Groupware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-6022 · Security Note
• http://kb.cert.org/vuls/id/450646 · Note
• http://securityfocus.com/bid/63463 · Note
• https://t.me/cvenotify/970 · Telegram Post