ID de Prueba:	1.3.6.1.4.1.25623.1.0.103508
Categoría:	Web application abuses
Título:	Tiki Wiki CMS Groupware 'unserialize()' Multiple PHP Code Execution Vulnerabilities
Resumen:	Tiki Wiki CMS Groupware is prone to multiple remote PHP code-; execution vulnerabilities.
Descripción:	Summary: Tiki Wiki CMS Groupware is prone to multiple remote PHP code- execution vulnerabilities. Vulnerability Impact: An attacker can exploit these issues to inject and execute arbitrary malicious PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system, other attacks are also possible. Affected Software/OS: Tiki Wiki CMS Groupware 8.3 is vulnerable, other versions may also be affected. Solution: Updates are available. Please see the references for details. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0911 BugTraq ID: 54298 http://www.securityfocus.com/bid/54298 Bugtraq: 20120704 [CVE-2012-0911] Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution (Google Search) http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html http://www.exploit-db.com/exploits/19573 http://www.exploit-db.com/exploits/19630 http://osvdb.org/83534 XForce ISS Database: tikiwiki-unserialize-code-exec(76758) https://exchange.xforce.ibmcloud.com/vulnerabilities/76758
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.