Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting

披露于 2020/01/15 · 更新于 2025/07/17

CVSS 评分6.1/ 10.0

EPSS 概率0.93%百分位 75.1%

漏洞描述

Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site scripting via the GET "ajax" parameter to snarf_ajax.php.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 TikiWiki CMS 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
tikiwiki_xss Tiki Wiki CMS Groupware v25.0 - Cross Site Scripting TikiWiki CMS	中危	—	—	PoCEXP	2024/06/08
CVE-2020-15906 Tiki Wiki CMS GroupWare - Authentication Bypass TikiWiki CMS	严重	9.8	91.1%	PoCEXP	2020/07/23
CVE-2019-11043RCE PHP-FPM Path Info Buffer Underflow - Remote Code Execution TikiWiki CMS	严重	9.8	94.1%	PoCEXP	2019/10/28
CVE-2010-4239 Tiki Wiki CMS Groupware 5.2 - Local File Inclusion TikiWiki CMS	严重	9.8	45.1%	PoCEXP	2019/10/28
CVE-2012-5321 TikiWiki CMS Groupware v8.3 - Open Redirect TikiWiki CMS	中危	5.8	16.5%	PoCEXP	2012/10/08
tikiwiki_reflected_xss Tiki Wiki CMS Groupware 5.2 - Cross-Site Scripting TikiWiki CMS	高危	7.2	—	PoCEXP	2010/10/01