Intrusion PreventionTikiWiki.Sort.Mode.Parameter.Information.Disclosure
Description
This indicates an attack attempt against an information-disclosure vulnerability
in TikiWiki.
A vulnerability has been reported in TikiWiki that may allow an attacker to get private information on a vulnerable system. This is possible because the user input filters fail to properly sanitize the sort_mode parameter value that is passed to "tiki-lastchanges.php".
Affected Products
Tikiwiki version 1.9.5
Impact
Information Disclosure
Recommended Actions
Currently we are not aware of any officially supplied patches for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17214 |
| Created | Apr 14, 2009 |
| Updated | Mar 20, 2023 |
| Risk |
|
| CVE ID | CVE-2006-5702 |
| Exploit Prediction Score | 3.92% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |