Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Tikiwiki 1.9.7 HTML/embed object injection
Aug 24 2007 06:57AM
morin josh gmail com
Tikiwiki
Version: 1.9.7
Example Address
http://example.com/tiki-remind_password.php
Overview:
The following codes can be added to the HTML password page by placing the HTML codes in the user name input box and hitting the "send me my password" button.
Examples:
1.<br><br><b><u>XSS</u></b>
2.<...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
Version: 1.9.7
Example Address
http://example.com/tiki-remind_password.php
Overview:
The following codes can be added to the HTML password page by placing the HTML codes in the user name input box and hitting the "send me my password" button.
Examples:
1.<br><br><b><u>XSS</u></b>
2.<...
[ more ]