Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Gentoo Linux Security Advisory GLSA 200507-06
https://security.gentoo.org/
Severity: High
Title: TikiWiki: Arbitrary command execution through XML-RPC
Date: July 06, 2005
Bugs: #97648
ID: 200507-06
Synopsis
=======
TikiWiki includes PHP XML-RPC code, making it vulnerable to arbitrary
command execution.
Background
=========
TikiWiki is a web-based groupware and content management system (CMS),
using PHP, ADOdb and Smarty. TikiWiki includes vulnerable PHP XML-RPC
code.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 www-apps/tikiwiki < 1.8.5-r1 >= 1.8.5-r1
==========
TikiWiki is vulnerable to arbitrary command execution as described in
GLSA 200507-01.
Impa...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.