NVD

Id
48492  
Name
CVE-2009-1204  
Description
Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, and (4) tiki-orphan_pages.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-31  
Modified Date
2012-10-24  
Seq
2009-1204  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244459 48492 CVE-2009-1204 http://dev.tikiwiki.org/tiki-view_tracker_item.php?itemId=2359&trackerId=5&show=view&reloff=3&cant=1229&status=o&trackerId=5&sort_mode=created_desc  View
244460 48492 CVE-2009-1204 http://info.tikiwiki.org/tiki-read_article.php?articleId=51  View
244461 48492 CVE-2009-1204 http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt?view=markup  View
244462 48492 CVE-2009-1204 20090312 TikiWiki 2.2 XSS Vulnerability in URI  View
244463 48492 CVE-2009-1204 34105  View
244464 48492 CVE-2009-1204 34106  View
244465 48492 CVE-2009-1204 34107  View
244466 48492 CVE-2009-1204 34108  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44919 JVNDB-2009-005926 Tiki CMS/Groupware におけるクロスサイトスクリプティングの脆弱性 TikiWiki (Tiki) CMS/Groupware には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1204 38635 CVE-2009-1204 48492 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005926.html 2009-03-18 2012-12-20 View