CVE-2005-3529: tiki tikiwiki_cms\/groupware

Vulnerability summary

CVE-2005-3529 is a medium (CVSS 5.0) vulnerability in tiki tikiwiki_cms\/groupware. EPSS estimates a 1.43% chance of exploitation in the next 30 days, higher than 72.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 20-11-2005
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.