| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | = 1.9.8 |
tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free