high8.8
CVE-2018-20719
In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.
Impact
In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tikiwiki Cms\/Groupware | before 17.2 |