vendor:
TikiWiki
by:
rgod
8,8
CVSS
HIGH
Remote Code Execution
78
CWE
Product Name: TikiWiki
Affected Version From: 1.9 Sirius
Affected Version To: 1.9 Sirius
Patch Exists: YES
Related CWE: N/A
CPE: a:tikiwiki:tikiwiki
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
TikiWiki <= 1.9 Sirius "jhot.php" remote commands execution exploit
This exploit allows an attacker to execute arbitrary commands on a vulnerable TikiWiki <= 1.9 Sirius installation. The exploit works by sending a specially crafted HTTP request to the vulnerable jhot.php script, which then executes the attacker's commands.
Mitigation:
Upgrade to the latest version of TikiWiki