CVE-2025-34111

Mô tả

Tham khảo

• raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/tikiwiki_upload_exec.rb · Exploit
• tiki.org/article434-Security-update-Tiki-15-2-Tiki-14-4-and-Tiki-12-9-released · Release Notes
• exploit-db.com/exploits/40091 · Exploit
• vulncheck.com/advisories/tiki-wiki-el-finder-unauthenticated-file-upload-rce · Third Party Advisory

Lỗ hổng khác của tikiwiki cms/groupware

• CVE-2021-36551TRUNG BÌNH 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability a…
• CVE-2021-36550TRUNG BÌNH 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulner…
• CVE-2020-29254CAO 8.8TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an unauthenticated, remote attacker to conduct a cross…
• CVE-2020-8966TRUNG BÌNH 6.1There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupwa…
• CVE-2013-6022TRUNG BÌNH 6.1A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote…