← Database

CVE-2004-1927

MEDIUM CVSS: 5.0 Published: 2004-04-11 Modified: 2026-06-16

Description

Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (dot dot) sequences in the mapfile parameter.

Affected Platforms

Tiki Tikiwiki Cms\/Groupware

Weakness Type

CWE-22

References