CPE Details
Tiki Tikiwiki CMS/Groupware 18.4
18.4
2019-10-23
18h06 +00:00
18h06 +00:00
2019-10-23
18h06 +00:00
18h06 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:tiki:tikiwiki_cms\/groupware:18.4:*:*:*:*:*:*:*
Informations
Vendor
tikiProduct
tikiwiki_cms\/groupwareVersion
18.4Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments (scripts) into a legitimate web page. | 6.5 |
Moyen |
||
| tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-download_file.php?display&fileId= URI. | 5.4 |
Moyen |
