|
Description
|
|
Multiple vulnerabilities have been identified in TikiWiki, which could be exploited by attackers to execute arbitrary scripting code. These flaws are due to input validation errors in the "tiki-edit_structure.php" and "tiki-setup_base.php" scripts when handling malformed parameters, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
Note: An input validation error in the "tiki-register.php" script could allow malicious people to bypass security restrictions and cause a vulnerable application to send notification spam.
|
