CVE-2005-3529

Published: Nov 20, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to obtain the installation path via an invalid topics_sort_mode parameter, possibly related to an SQL injection vulnerability.

Affected (3)

Products: Tiki: Tikiwiki Cms/groupware

Tiki

1 product

Tikiwiki Cms/groupware

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Tiki Tikiwiki Cms/groupware	Version 1.9.0
Tiki Tikiwiki Cms/groupware	Version 1.9.1
Tiki Tikiwiki Cms/groupware	Version 1.9.2

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://moritz-naumann.com/adv/0003/tikiw/0003.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/17521

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/165

Source: cve@mitre.org

http://www.osvdb.org/20711

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/416152/30/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2376

Source: cve@mitre.org

http://moritz-naumann.com/adv/0003/tikiw/0003.txt