Technical Description

Two vulnerabilities were identified in TikiWiki, which could be exploited by malicious users to perform cross site scripting attacks or disclose sensitive information.

The first issue is due to an input validation error in "tiki-view_forum_thread.php" when processing a specially crafted "topics_offset", which may be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser.

The second issue is due to an input validation error in "tiki-view_forum_thread.php" when handling a malformed "topics_sort_mode" parameter, which may be exploited by attackers to determine the installation path.

Affected Products

TikiWiki version 1.9.2 and prior

Solution

Upgrade to version 1.9.2 :
https://sourceforge.net/project/showfiles.php?group_id=64258&package_id=112134&release_id=367250

References

http://www.vupen.com/english/advisories/2005/2376
http://www.frsirt.com/english/reference/539

Credits

Vulnerabilities reported by Moritz Naumann

ChangeLog

2005-11-10 : Initial release
2005-12-10 : Updated Solution

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.