| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | = 2.2= 3.0= 3.1= 3.2= 3.3= 3.4= 3.5= 4= 4.0= 4.1= 4.2= 5.0= 5.1= 5.2= 5.3= 6.0= 6.1= 6.2= 7.0= 7.1= 7.2= 8.0= 8.1≤ 8.2 |
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free