Логотип exploitDog
bind:CVE-2012-0911
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2012-0911

Количество 3

Количество 3

nvd логотип

CVE-2012-0911

больше 13 лет назад

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.

CVSS3: 9.8
EPSS: Высокий
debian логотип

CVE-2012-0911

больше 13 лет назад

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote att ...

CVSS3: 9.8
EPSS: Высокий
github логотип

GHSA-qmxq-rh22-gxp8

больше 3 лет назад

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.

CVSS3: 9.8
EPSS: Высокий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2012-0911

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.

CVSS3: 9.8
78%
Высокий
больше 13 лет назад
debian логотип
CVE-2012-0911

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote att ...

CVSS3: 9.8
78%
Высокий
больше 13 лет назад
github логотип
GHSA-qmxq-rh22-gxp8

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.

CVSS3: 9.8
78%
Высокий
больше 3 лет назад

Уязвимостей на страницу