CVE-2005-1925: Path Traversal
Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suckurl parameter to tiki-editpage.php or (2) language parameter to tiki-userpreferences.php.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1925?
CVE-2005-1925 is considered a high severity vulnerability due to its ability to allow remote attackers to access sensitive files and execute commands.
How do I fix CVE-2005-1925?
To fix CVE-2005-1925, upgrade Tikiwiki to version 1.9.1 or later, which addresses the directory traversal vulnerabilities.
What systems are affected by CVE-2005-1925?
CVE-2005-1925 affects multiple versions of Tikiwiki, including 1.6.1 and all 1.9.0 release candidates.
Is CVE-2005-1925 easy to exploit?
Yes, CVE-2005-1925 can be easily exploited by attackers with knowledge of the suck_url and language parameters in the affected scripts.
What actions can be taken to mitigate CVE-2005-1925 if updating is not immediately possible?
If updating is not possible, restrict access to the affected Tikiwiki scripts and monitor logs for suspicious activity until a patch can be applied.