CVE-2012-3996

Published: Jul 12, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.

Affected (24)

Products: Tiki: Tikiwiki Cms/groupware

Tiki

1 product

Tikiwiki Cms/groupware

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Tiki Tikiwiki Cms/groupware	Up to 8.2
Tiki Tikiwiki Cms/groupware	Version 2.2
Tiki Tikiwiki Cms/groupware	Version 3.0
Tiki Tikiwiki Cms/groupware	Version 3.1
Tiki Tikiwiki Cms/groupware	Version 3.2
Tiki Tikiwiki Cms/groupware	Version 3.3
Tiki Tikiwiki Cms/groupware	Version 3.4
Tiki Tikiwiki Cms/groupware	Version 3.5
Tiki Tikiwiki Cms/groupware	Version 4.0
Tiki Tikiwiki Cms/groupware	Version 4.1
Tiki Tikiwiki Cms/groupware	Version 4.2
Tiki Tikiwiki Cms/groupware	Version 4
Tiki Tikiwiki Cms/groupware	Version 5.0
Tiki Tikiwiki Cms/groupware	Version 5.1
Tiki Tikiwiki Cms/groupware	Version 5.2
Tiki Tikiwiki Cms/groupware	Version 5.3
Tiki Tikiwiki Cms/groupware	Version 6.0
Tiki Tikiwiki Cms/groupware	Version 6.1
Tiki Tikiwiki Cms/groupware	Version 6.2
Tiki Tikiwiki Cms/groupware	Version 7.0
Tiki Tikiwiki Cms/groupware	Version 7.1
Tiki Tikiwiki Cms/groupware	Version 7.2
Tiki Tikiwiki Cms/groupware	Version 8.0
Tiki Tikiwiki Cms/groupware	Version 8.1