VDB
CVE-2010-1134
CVE-2010-1134
PUBLISHED
CVSS 7.5 HIGH
SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable.
EPSS 1.26% · 69.5th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
1.26%
69.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| tiki | tikiwiki_cms\/groupware | 3.0, 3.1, 3.2 |
| n/a | n/a | n/a |
Timeline
- Mar 26, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
- Jul 25, 2023 EPSS Score
References
- http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases url
- 62800 vdb
- 38882 third-party-advisory
- http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25429 patch
- http://www.securityfocus.com/bid/38608 patch
- https://nvd.nist.gov/vuln/detail/CVE-2010-1134 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56769 url