In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.

Published Jan 15, 2019 · Updated Aug 5, 2024 · Assigned by mitre