CVE-2004-1928
Tiki CMS/Groupware < 1.8.1 - Arbitrary File Upload via Image Upload Feature
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1928. PoCs published by JeiAr.
AI-analyzed exploit summary The provided text is a brief writeup describing multiple vulnerabilities in an unspecified application, including path disclosure, XSS, SQL injection, and arbitrary file upload. It references a generic example URL but lacks exploit code or technical details.
Description
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.
Exploits (2)
The provided text is a brief writeup describing multiple vulnerabilities in an unspecified application, including path disclosure, XSS, SQL injection, and arbitrary file upload. It references a generic example URL but lacks exploit code or technical details.
This is a detailed technical writeup describing multiple vulnerabilities in TikiWiki CMS/Groupware, including path disclosure, XSS, SQL injection, code injection, file enumeration, and arbitrary file upload. It provides specific examples of vulnerable endpoints and attack vectors.