Unscored CVE-2007-4554 EUVD-2007-4537GHSA-f6qm-fg6r-h5f3

Cross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS/Groupware) 1.9.7 allows remote attackers to …

Published Aug 28, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS/Groupware) 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: this issue might be related to CVE-2006-2635.7.

References

20070824 Tikiwiki 1.9.7 HTML/embed object injection mailing-list
25433 vdb-entry
3064 third-party-advisory
ADV-2007-2984 vdb-entry
26618 third-party-advisory