Tiki Wiki CMS Groupware 'unserialize () 'PHP Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Tiki Wiki CMS Groupware 8.2
Tiki Wiki CMS Groupware 7.0
Tiki Wiki CMS Groupware 6.5 LTS
Tiki Wiki CMS Groupware 6.4 LTS
Tiki Wiki CMS Groupware 5.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56282

Tiki Wiki CMS Groupware is a free wiki-based open-source content management system.

A security vulnerability exists in versions earlier than Tiki Wiki CMS Groupware v6.8 and 9.2. Attackers can exploit this vulnerability to inject and execute arbitrary PHP code in affected applications.

<* Source: Egidio Romano
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Tiki Wiki CMS Groupware
-----------------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Htp: // www.tiki.org