Filtered by vendor Tiki Subscriptions
Total 88 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2011-4336 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 6.1 Medium
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
CVE-2010-4241 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 8.8 High
Tiki Wiki CMS Groupware 5.2 has CSRF
CVE-2010-4240 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 6.1 Medium
Tiki Wiki CMS Groupware 5.2 has XSS
CVE-2010-4239 1 Tiki 1 Tikiwiki Cms\/groupware 2024-11-21 9.8 Critical
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
CVE-2024-51509 1 Tiki 1 Tiki 2024-10-29 4.8 Medium
Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki-admin_modules.php) stored XSS payload in the Name.
CVE-2024-51508 1 Tiki 1 Tiki 2024-10-29 4.8 Medium
Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Index.
CVE-2024-51507 1 Tiki 1 Tiki 2024-10-29 4.8 Medium
Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name.
CVE-2024-51506 1 Tiki 1 Tiki 2024-10-29 4.8 Medium
Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages" stored XSS payload in the description.