Tiki Wiki CMS Groupware is prone to multiple remote PHP code- execution vulnerabilities. An attacker can exploit these issues to inject and execute arbitrary malicious PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system other attacks are also possible. Tiki Wiki CMS Groupware 8.3 is vulnerable other versions may also be affected.

Updates are available. Please see the references for details.

• http://www.securityfocus.com/bid/54298

---

Updated on 2015-03-25