medium6.1Public exploit code
CVE-2011-4336
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tiki Wiki CMS Groupware 7.2 - 'snarf_ajax.php' Cross-Site Scripting2011-07-20 · webapps · php · Verified
Impact
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tikiwiki Cms\/Groupware | through 7.0 |