Unscored severity · published May 2, 2005
CVE-2005-0200
TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP…
–
CVSS
2.4%
EPSS
No
On KEV
Description
TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tikiwiki Cms/groupware · Tiki
through 1.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0200
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0200
secunia.com
http://secunia.com/advisories/13948
Patch
http://tikiwiki.org/art102
Patch
http://www.gentoo.org/security/en/glsa/glsa-200501-41.xml
More from Tikiwiki Cms/groupware
9.8
CVE-2025-34111
Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE
9.8
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
9.8
CVE-2012-0911
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to…
8.8
CVE-2020-29254
TikiWiki 21.2 allows templates to be edited without CSRF protection
8.8
CVE-2010-4241
Tiki Wiki CMS Groupware 5.2 has CSRF