CVE-2007-5683
Published Oct 26, 2007
Last updated 12 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to the password reminder page (tiki-remind_password.php), (2) IMG tags in wiki pages, and (3) the local_php parameter to db/tiki-db.php.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD2B821A-4879-423C-B2EF-811F1F0D3F90",
"versionEndIncluding": "1.9.8.1"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B13501C0-3322-4D0C-8F7F-12535C76CB69"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADE04A29-E90B-41E1-A8B4-462B54C079B4"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2540703B-63B8-41F4-A17A-0274A7DE7E63"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1489E8DC-11E7-49A3-84FF-909954147D01"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "127349FA-B76D-402A-B688-F2F44024FA11"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "175D43FD-450F-443E-831B-B8091BE7054F"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F437662-CD55-477B-9FEE-0CC4E6CB908D"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB235741-1FDA-4C90-BD6A-22D18D57D240"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62C09D81-AA53-4E82-BEA6-D321D95D2E0F"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CE1CDD1-27F1-456C-933E-24219E6190CC"
}
],
"operator": "OR"
}
]
}
]