CVE-2011-4336

CVE-2011-4336: vulnerability in Tiki Wiki CMS Groupware

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

38Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 7.7%
from disclosure to weaponsame day
Published on NVDJan 15
1st PoCJul 20
Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.