Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

tikiwiki: multiple vulnerabilities

Package(s):

tikiwiki

CVE #(s):

CVE-2006-3048 CVE-2006-3047

Created:

June 29, 2006

Updated:

July 5, 2006

Description:

The Tikiwiki content management system has an SQL injection vulnerability due to insufficient input sanitization. An attacker may be able to execute arbitrary SQL statements or inject arbitrary scripts into the user's browser.

Alerts:

Gentoo

200606-29

2006-06-29

(Log in to post comments)