Unscored severity · published Jun 16, 2006
CVE-2006-3048
SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vectors
–
CVSS
1.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tikiwiki Cms/groupware · Tiki
through 1.9.3.1; 1.9.0; 1.9.0; 1.9.0; 1.9.0; 1.9.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3048
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3048
Patch
http://secunia.com/advisories/20648
secunia.com
http://secunia.com/advisories/20850
securityreason.com
http://securityreason.com/securityalert/1102
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200606-29.xml
www.securityfocus.com
http://www.securityfocus.com/archive/1/437017/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/18421
More from Tikiwiki Cms/groupware
9.8
CVE-2025-34111
Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE
9.8
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
9.8
CVE-2012-0911
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to…
8.8
CVE-2020-29254
TikiWiki 21.2 allows templates to be edited without CSRF protection
8.8
CVE-2010-4241
Tiki Wiki CMS Groupware 5.2 has CSRF