This host is running TikiWiki and is prone to remote command execution vulnerability.

Successful exploitation will let the attacker execute arbitrary system commands with the privileges of the webserver process. Impact Level: System/Application

Upgrade to TikiWiki version 1.9.5 or later For updates refer to http://info.tiki.org/Download

The flaw is due to 'jhot.php' script not correctly verifying uploaded files. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script to the 'img/wiki' directory.

TikiWiki version 1.9.4 and prior

• http://secunia.com/advisories/21733
• http://www.exploit-db.com/exploits/2288/
• http://www.osvdb.org/28456

---

Updated on 2015-03-25