CVE-2010-1134

N/A Unknown

Published: March 27, 2010 Modified: April 29, 2026

Description

SQL injection vulnerability in the _find function in searchlib.php in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to execute arbitrary SQL commands via the $searchDate variable.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases

Source: cve@mitre.org

http://osvdb.org/62800

Source: cve@mitre.org

http://secunia.com/advisories/38882

Source: cve@mitre.org

Vendor Advisory

http://tikiwiki.svn.sourceforge.net/viewvc/tikiwiki?view=rev&revision=25429

Source: cve@mitre.org

Patch Vendor Advisory

http://www.securityfocus.com/bid/38608

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/56769

Source: cve@mitre.org

http://info.tikiwiki.org/article86-Tiki-Announces-3-5-and-4-2-Releases