Description
SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
References
- 20850 third-party-advisory
- 18421 vdb-entry
- 20648 third-party-advisory
- tikiwiki-unspecified-sql-injection(27146) vdb-entry
- 20060613 TikiWiki Sql injection & XSS Vulnerabilities mailing-list
- 1102 third-party-advisory
- ADV-2006-2349 vdb-entry
- GLSA-200606-29 vendor-advisory