Unscored severity · published Mar 27, 2010
CVE-2010-1136
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tikiwiki Cms/groupware · Tiki
3.0; 3.1; 3.2; 3.3; 3.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1136
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1136
info.tikiwiki.org
http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases
osvdb.org
http://osvdb.org/62801
Vendor Advisory
http://secunia.com/advisories/38882
tikiwiki.svn.sourceforge.net
http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/proposals/3.x/lib/userslib.php?r1=25196&r2=25195&pathrev=25196
tikiwiki.svn.sourceforge.net
http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25196
www.securityfocus.com
http://www.securityfocus.com/bid/38608
More from Tikiwiki Cms/groupware
9.8
CVE-2025-34111
An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector…
9.8
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
9.8
CVE-2012-0911
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to…
8.8
CVE-2020-29254
TikiWiki 21.2 allows templates to be edited without CSRF protection
8.8
CVE-2010-4241
Tiki Wiki CMS Groupware 5.2 has CSRF