Search vulnerabilities

Results 2

Export CSV
CVE-2009-0602

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Products
CVE-2002-2106

PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.

CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Products