Description
|
|
Two vulnerabilities were identified in TikiWiki, which could be exploited by malicious users to perform cross site scripting attacks or disclose sensitive information.
The first issue is due to an input validation error in "tiki-view_forum_thread.php" when processing a specially crafted "topics_offset", which may be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser.
The second issue is due to an input validation error in "tiki-view_forum_thread.php" when handling a malformed "topics_sort_mode" parameter, which may be exploited by attackers to determine the installation path.
|