CVE-2010-4240

Description

References

• access.redhat.com/security/cve/cve-2010-4240 · Broken Link
• dl.packetstormsecurity.net/1009-exploits/tikiwiki52-xss.txt · Exploit
• security-tracker.debian.org/tracker/CVE-2010-4240 · Issue Tracking
• openwall.com/lists/oss-security/2010/11/22/9 · Mailing List

More vulnerabilities in tikiwiki cms/groupware

• CVE-2025-34111CRITICAL 9.8An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component…
• CVE-2021-36551MEDIUM 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability a…
• CVE-2021-36550MEDIUM 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulner…
• CVE-2020-29254HIGH 8.8TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an unauthenticated, remote attacker to conduct a cross…
• CVE-2020-8966MEDIUM 6.1There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupwa…