Unscored severity · published Oct 8, 2012
CVE-2012-5321
tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka…
–
CVSS
13.8%
EPSS
No
On KEV
Description
tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary web site pages into frames and conduct phishing attacks via the url parameter, aka "frame injection."
Exploitation
Is it being used?
Exploit prediction (EPSS)13.8% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tikiwiki Cms/groupware · Tiki
8.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5321
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5321
osvdb.org
http://osvdb.org/79409
Vendor Advisory
http://secunia.com/advisories/48102
Exploit
http://st2tea.blogspot.com/2012/02/tiki-wiki-cms-groupware-frame-injection.html
Exploit
http://www.securityfocus.com/bid/52079
Exploit
http://www.securitytracker.com/id?1026708
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/73403
More from Tikiwiki Cms/groupware
9.8
CVE-2025-34111
Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE
9.8
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
9.8
CVE-2012-0911
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to…
8.8
CVE-2020-29254
TikiWiki 21.2 allows templates to be edited without CSRF protection
8.8
CVE-2010-4241
Tiki Wiki CMS Groupware 5.2 has CSRF