cbcvebase.
CVE-2007-5684
published 2007-10-26

CVE-2007-5684: Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute…

PriorityP341high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.02%
85.8th percentile
Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in (1) error_handler_file and (2) local_php parameters to (a) tiki-index.php, or (3) encoded "..%2F" sequences in the imp_language parameter to tiki-imexport_languages.php.

Affected

11 ranges
VendorProductVersion rangeFixed in
tikitikiwiki_cms_groupware<= 1.9.8.1—
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
tikitikiwiki_cms_groupware——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.