Tikiwiki Vulnérabilités

Version

1.6.1	20
1.9.0	16
1.9.1	16
1.9.8	14
1.9.7	14

Contre-mesures

Official Fix	40
Temporary Fix	0
Workaround	2
Unavailable	0
Not Defined	28

Exploitabilité

High	4
Functional	0
Proof-of-Concept	38
Unproven	2
Not Defined	26

Vecteur d'accès

Not Defined	0
Physical	0
Local	2
Adjacent	0
Network	68

Authentification

Not Defined	0
High	0
Low	18
None	52

Interaction de l'utilisateur

Not Defined	0
Required	40
None	30

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	16
≤5	20
≤6	12
≤7	2
≤8	14
≤9	4
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	24
≤5	20
≤6	4
≤7	16
≤8	0
≤9	4
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	16
≤5	20
≤6	12
≤7	2
≤8	14
≤9	4
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	2
<2k	34
<5k	34
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	70
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (66): 1.6.1, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.3.1, 1.9.3.2, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8, 1.9.8.1, 1.9.9, 1.9.11, 2.2, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 4.0, 4.1, 4.2, 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 6.2, 6.3, 6.5, 6.8, 6.9, 6.10, 6.11, 6.12, 7.0, 7.1, 7.2, 8.0, 8.1, 8.2, 8.3, 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 10.0, 10.1, 10.2, 10.3, 11.0, 21.0, 21.1, 21.2, 21.4

Type de logiciel: Content Management System

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
29/10/2021	3.5	3.4	TikiWiki Add Event Module tiki-calendar.php cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-36551
29/10/2021	3.5	3.4	TikiWiki Create Category tiki-browse_categories.php cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-36550
11/12/2020	6.5	6.5	TikiWiki Web-based Management Interface cross site request forgery	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-29254
06/11/2013	7.3	7.0	TikiWiki sql injection	$0-$5k	$0-$5k	High	Official Fix	0.00	CVE-2013-4715
06/11/2013	4.3	4.1	TikiWiki cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-4714
08/10/2012	6.5	6.5	TikiWiki tiki-featured_link.php elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2012-5321
30/09/2012	4.3	4.1	TikiWiki tiki-cookie-jar.php cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2011-4551
12/07/2012	5.3	5.0	TikiWiki Installation divulgation de l'information	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	CVE-2012-3996
12/07/2012	7.3	7.0	TikiWiki bannerlib.php unserialize elévation de privilèges	$0-$5k	$0-$5k	High	Official Fix	0.04	CVE-2012-0911
27/03/2010	7.3	7.0	TikiWiki Login user_logout elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2010-1135