ID de Prueba:	1.3.6.1.4.1.25623.1.0.14364
Categoría:	Web application abuses
Título:	Tiki Wiki CMS Groupware < 1.8.2 Multiple Input Validation Vulnerabilities
Resumen:	Tiki Wiki CMS Groupware is prone to multiple vulnerabilities; in various modules of the application.
Descripción:	Summary: Tiki Wiki CMS Groupware is prone to multiple vulnerabilities in various modules of the application. Vulnerability Impact: These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection, directory traversal, and arbitrary file upload. Affected Software/OS: Tiki Wiki CMS Groupware prior to version 1.8.2. Solution: Update to version 1.8.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1923 BugTraq ID: 10100 http://www.securityfocus.com/bid/10100 Bugtraq: 20040412 Multiple Vulnerabilities In Tiki CMS/Groupware [ TikiWiki ] (Google Search) http://marc.info/?l=bugtraq&m=108180073206947&w=2 http://secunia.com/advisories/11344 XForce ISS Database: tikiwiki-path-disclosure(15847) https://exchange.xforce.ibmcloud.com/vulnerabilities/15847 Common Vulnerability Exposure (CVE) ID: CVE-2004-1924 XForce ISS Database: tikiwiki-xss(15846) https://exchange.xforce.ibmcloud.com/vulnerabilities/15846 Common Vulnerability Exposure (CVE) ID: CVE-2004-1925 XForce ISS Database: tikiwiki-sql-injection(15845) https://exchange.xforce.ibmcloud.com/vulnerabilities/15845 Common Vulnerability Exposure (CVE) ID: CVE-2004-1926 Common Vulnerability Exposure (CVE) ID: CVE-2004-1927 XForce ISS Database: tikiwiki-tikimap-file-disclosure(15848) https://exchange.xforce.ibmcloud.com/vulnerabilities/15848 Common Vulnerability Exposure (CVE) ID: CVE-2004-1928 XForce ISS Database: tikiwiki-file-upload(15849) https://exchange.xforce.ibmcloud.com/vulnerabilities/15849
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.