| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | = 1.9.0= 1.9.1= 1.9.2 |
tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free