| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | = 1.6.1= 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4= 1.9.5= 1.9.6= 1.9.7≤ 1.9.8 |
Incomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki before 1.9.8.2 allows remote attackers to execute arbitrary code by using variable functions and variable variables to write variables whose names match the whitelist, a different vulnerability than CVE-2007-5423.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free