| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | ≤ 1.6.1 |
TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free