CVE-2004-1925: tiki tikiwiki_cms\/groupware SQL Injection

CVSS: 7.5v2.0HighModified

Published 10-05-2005Last modified 08-08-2024

Vulnerability summary

CVE-2004-1925 is a high (CVSS 7.5) SQL Injection vulnerability in tiki tikiwiki_cms\/groupware. EPSS estimates a 1.21% chance of exploitation in the next 30 days, higher than 68.2% of scored vulnerabilities. 18 public exploits are recorded.

Overall risk

40/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

1.21%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits18reference, exploit-database

Timeline

10-05-2005
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php, (2) tiki-list_file_gallery.php, (3) tiki-directory_ranking.php, (4) tiki-browse_categories.php, (5) tiki-index.php, (6) tiki-user_tasks.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-file_galleries.php, (10) tiki-list_faqs.php, (11) tiki-list_trackers.php, (12) tiki-list_blogs.php, or via the offset parameter in (13) tiki-usermenu.php, (14) tiki-browse_categories.php, (15) tiki-index.php, (16) tiki-user_tasks.php, (17) tiki-list_faqs.php, (18) tiki-list_trackers.php, or (19) tiki-list_blogs.php.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

1.21%

Chance of exploitation in the next 30 days

Percentile

68%

Versus all other CVEs

30-day change

0.00 pp

From 1.21% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

18 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (secunia.com)
Maturity: unknown
exploit-databasephpUnverified
TikiWiki < 1.8.1 - Multiple Vulnerabilities
Maturity: poc

Show all 18 exploits

exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-browse_categories.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-directory_ranking.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-directory_search.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-file_galleries.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-index.php?comments_offset & offset' SQL Injections
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-list_blogs.php?offset' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-list_blogs.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-list_faqs.php?offset' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-list_faqs.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-list_file_gallery.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-list_trackers.php?offset' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-list_trackers.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-usermenu.php?offset' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-usermenu.php?sort_mode' SQL Injection
Maturity: poc
exploit-databasephpVerified
TikiWiki Project 1.8 - 'tiki-user_tasks.php?offset & sort_mode' SQL Injections
Maturity: poc

Weaknesses

CWE · root cause

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Affected systems

Tiki1 product

tikiwiki_cms\/groupware≤ 1.8.1 | 16.1

1 vendor · 1 product

References

5 links

www.securityfocus.com/bid/10100VDB EntryX Refsource BIDExploitPatchVendor Advisory
marc.info?l=bugtraq&m=108180073206947&w=2Mailing ListX Refsource BUGTRAQ
secunia.com/advisories/11344Third Party AdvisoryX Refsource SECUNIAExploitPatchVendor Advisory
tikiwiki.org/tiki-read_article.php?articleId=66X Refsource CONFIRMPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/15845VDB EntryX Refsource XF

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities