CVE-2004-1925

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'taskId' and 'offset' parameters in 'tiki-user_tasks.php'. It references a known CVE but lacks actual exploit code.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'sort_mode' parameter in tiki-usermenu.php. However, no functional exploit code is included.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'offset' parameter in tiki-usermenu.php. It lacks executable exploit code but references a known CVE.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'sort_mode' parameter in 'tiki-list_trackers.php'. It lacks executable exploit code but outlines attack vectors.

The provided text describes multiple vulnerabilities in TikiWiki CMS, including SQL injection via the 'offset' and 'sort_mode' parameters in 'tiki-list_trackers.php'. No actual exploit code is present, only parameter descriptions.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'sort_mode' parameter in 'tiki-list_file_gallery.php'. No actual exploit code is present, only a description of the vulnerability.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'sort_mode' parameter in 'tiki-list_faqs.php'. It lacks executable exploit code but outlines attack vectors.

The provided text describes multiple vulnerabilities in various modules of an application, including SQL injection via the 'offset' parameter in 'tiki-list_faqs.php'. However, it lacks executable exploit code.

The provided text describes multiple vulnerabilities in TikiWiki CMS, specifically highlighting a SQL injection vulnerability in the 'tiki-list_blogs.php' script via the 'sort_mode' parameter. It does not contain executable exploit code but references a known CVE.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'offset' parameter in 'tiki-list_blogs.php'. However, it lacks executable exploit code, making it a vulnerability writeup rather than a functional PoC.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'comments_offset' parameter in 'tiki-index.php'. However, it lacks executable exploit code, making it a vulnerability writeup rather than a functional PoC.

The provided text describes multiple vulnerabilities in TikiWiki, including SQL injection via the 'sort_mode' parameter in 'tiki-file_galleries.php'. It references a SecurityFocus BID but lacks actual exploit code.

The provided text describes multiple vulnerabilities in TikiWiki CMS, including SQL injection via the 'sort_mode' parameter in 'tiki-directory_search.php'. No actual exploit code is present, only a reference to a vulnerable parameter.

The provided text describes multiple vulnerabilities in TikiWiki CMS, including SQL injection via the 'sort_mode' parameter in 'tiki-directory_ranking.php'. However, no actual exploit code is present.

The provided text describes multiple vulnerabilities in TikiWiki CMS, specifically highlighting a SQL injection vulnerability in the 'tiki-browse_categories.php' file. It does not contain executable exploit code but references a parameter susceptible to SQL injection.

This is a detailed technical writeup describing multiple vulnerabilities in TikiWiki CMS/Groupware, including path disclosure, XSS, SQL injection, code injection, file enumeration, and arbitrary file upload. It provides specific examples of vulnerable parameters and attack vectors.