Package(s):	tikiwiki	CVE #(s):
Created:	October 28, 2005	Updated:	November 2, 2005
Description:	Due to improper input validation, TikiWiki can be exploited to perform cross-site scripting attacks. A remote attacker could exploit this to inject and execute malicious script code or to steal cookie-based authentication credentials, potentially compromising the victim's browser.
Alerts:	Gentoo 200510-23 tikiwiki 2005-10-28

---

to post comments