VDB
CVE-2010-1133
CVE-2010-1133
PUBLISHED
CVSS 7.5 HIGH
Multiple SQL injection vulnerabilities in TikiWiki CMS/Groupware 4.x before 4.2 allow remote attackers to execute arbitrary SQL commands via unspecified vectors, probably related to (1) tiki-searchindex.php and (2) tiki-searchresults.php.
EPSS 1.41% · 72.3th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
1.41%
72.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| tiki | tikiwiki_cms\/groupware | 4.0, 4.1 |
Timeline
- Mar 26, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 31, 2023 EPSS Score
- Jul 24, 2023 EPSS Score
References
- 38608 vdb
- 62800 vdb
- http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25424 url
- http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases url
- tikiwiki-unknown-input-sql-injection(56769) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2010-1133 advisory
- http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25435 advisory
- http://secunia.com/advisories/38896 advisory