Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2005-1925
HistoryNov 18, 2005 - 11:00 a.m.

CVE-2005-1925

2005-11-1811:00:00
CWE-22
mitre
web.nvd.nist.gov
22
cve
2005
1925
tikiwiki
directory traversal
vulnerabilities
remote attackers
arbitrary files
execute commands
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.014

Percentile

86.2%

JSON

Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suck_url parameter to tiki-editpage.php or (2) language parameter to tiki-user_preferences.php.

Affected configurations

Nvd
Node
tikitikiwiki_cms\/groupwareRange≤1.9.0
OR
tikitikiwiki_cms\/groupwareMatch1.6.1
OR
tikitikiwiki_cms\/groupwareMatch1.9.0rc1
OR
tikitikiwiki_cms\/groupwareMatch1.9.0rc2
OR
tikitikiwiki_cms\/groupwareMatch1.9.0rc3
VendorProductVersionCPE
tikitikiwiki_cms\/groupware*cpe:2.3:a:tiki:tikiwiki_cms\/groupware:*:*:*:*:*:*:*:*
tikitikiwiki_cms\/groupware1.6.1cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.6.1:*:*:*:*:*:*:*
tikitikiwiki_cms\/groupware1.9.0cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.0:rc1:*:*:*:*:*:*
tikitikiwiki_cms\/groupware1.9.0cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.0:rc2:*:*:*:*:*:*
tikitikiwiki_cms\/groupware1.9.0cpe:2.3:a:tiki:tikiwiki_cms\/groupware:1.9.0:rc3:*:*:*:*:*:*

Related

securityvulns 2
nvd 1
cvelist 1
nessus 1
securityvulns
securityvulns
[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability
2005-11-11 00:00:00
[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-user_preferences Command Injection Vulnerability
2005-11-11 00:00:00
nvd
nvd
CVE-2005-1925
2005-11-18 06:03:00
cvelist
cvelist
CVE-2005-1925
2005-11-18 11:00:00
nessus
nessus
TikiWiki < 1.8.6 / 1.9.1 Multiple Vulnerabilities
2005-11-14 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.014

Percentile

86.2%

JSON
Related for CVE-2005-1925
securityvulns2nvd1cvelist1nessus1