| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | = 1.6.1= 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4= 1.9.5≤ 1.9.6 |
tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free