CVE-2004-1928
Tikiwiki Cms/groupware < 1.8.1 - Improper Input Validation
Title source: ruleDescription
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.
Exploits (2)
References (5)
Scores
EPSS
0.0747
EPSS Percentile
91.8%
Details
CWE
CWE-20
Status
published
Products (2)
tiki/tikiwiki_cms\/groupware
1.6.1
tiki/tikiwiki_cms\/groupware
< 1.8.1
Published
Apr 12, 2004
Tracked Since
Feb 18, 2026