Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors.
Multiple unspecified vulnerabilities in TikiWiki before 1.9.9 have unknown impact and attack vectors involving (1) tiki-editcss.php, (2) tiki-listgames.php, or (3) tiki-g-adminsharedsource.php.
Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suckurl parameter to tiki-editpage.php or (2) language parameter to tiki-userpreferences.php.
TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.
TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related to the Internet Explorer "Remember Me" feature. NOTE: some of these details are obtained from third party information.
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sortmode parameter in (1) tiki-usermenu.php, (2) tiki-listfilegallery.php, (3) tiki-directoryranking.php, (4) tiki-browsecategories.php, (5) tiki-index.php, (6) tiki-usertasks.php, (7) tiki-directoryranking.php, (8) tiki-directorysearch.php, (9) tiki-filegalleries.php, (10) tiki-listfaqs.php, (11) tiki-listtrackers.php, (12) tiki-listblogs.php, or via the offset parameter in (13) tiki-usermenu.php, (14) tiki-browsecategories.php, (15) tiki-index.php, (16) tiki-usertasks.php, (17) tiki-listfaqs.php, (18) tiki-listtrackers.php, or (19) tiki-listblogs.php.
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in a Directory/Add Site operation.
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wikiup URL.
TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.
tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email."
Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in (1) errorhandlerfile and (2) localphp parameters to (a) tiki-index.php, or (3) encoded "..%2F" sequences in the implanguage parameter to tiki-imexportlanguages.php.
Incomplete blacklist vulnerability in tiki-graphformula.php in TikiWiki before 1.9.8.2 allows remote attackers to execute arbitrary code by using variable functions and variable variables to write variables whose names match the whitelist, a different vulnerability than CVE-2007-5423.
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) bannerclick.php, (2) categorize.php, (3) tiki-adminincludedirectory.php, (4) tiki-directorysearch.php, which reveal the web server path in an error message.
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (dot dot) sequences in the mapfile parameter.
Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors.
Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to tiki-error.php, a different issue than CVE-2008-3653.
Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided input," a different issue than CVE-2008-3653.
Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) and modified filename in the movie parameter.
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to tiki-switchtheme.php, (2) find and priority parameters to messu-mailbox.php, (3) flag, priority, flagval, sortmode, or find parameters to messu-read.php, (4) articleId parameter to tiki-readarticle.php, (5) parentId parameter to tiki-browsecategories.php, (6) commentsthreshold parameter to tiki-index.php (7) articleId parameter to tiki-printarticle.php, (8) galleryId parameter to tiki-listfilegallery.php, (9) galleryId parameter to tiki-uploadfile.php, (10) faqId parameter to tiki-viewfaq.php, (11) chartId parameter to tiki-viewchart.php, or (12) surveyId parameter to tiki-surveystatssurvey.php.
Cross-site scripting (XSS) vulnerability in tiki-setupbase.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters.
Cross-site scripting (XSS) vulnerability in tiki-editarticle.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Multiple cross-site scripting (XSS) vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to the password reminder page (tiki-remindpassword.php), (2) IMG tags in wiki pages, and (3) the localphp parameter to db/tiki-db.php.
Cross-site scripting (XSS) vulnerability in tiki-specialchars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the areaname parameter.