CVE-2012-3996

Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.

TikiWiki CMS/Groupware v8.3 y anteriores permite a atacantes remotos obtener la ruta de instalación mediante una peticion a (1) admin/include_calendar.php, (2) tiki-rss_error.php, o (3) tiki-watershed_service.php.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-07-04 First Exploit
2012-07-12 CVE Reserved
2012-07-12 CVE Published
2024-09-17 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CAPEC

References (9)

URL	Tag	Source
http://www.osvdb.org/83533	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/19573	2012-07-04
https://www.exploit-db.com/exploits/19630	2012-07-09
http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html	2024-09-17
http://www.exploit-db.com/exploits/19573	2024-09-17
http://www.exploit-db.com/exploits/19630	2024-09-17

URL	Date	SRC
http://dev.tiki.org/item4109	2012-10-24
http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS	2012-10-24
http://info.tiki.org/article191-Tiki-Releases-8-4	2012-10-24

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				<= 8.2 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version " <= 8.2"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				2.2 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "2.2"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				3.0 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "3.0"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				3.1 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "3.1"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				3.2 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "3.2"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				3.3 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "3.3"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				3.4 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "3.4"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				3.5 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "3.5"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				4 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "4"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				4.0 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "4.0"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				4.1 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "4.1"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				4.2 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "4.2"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				5.0 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "5.0"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				5.1 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "5.1"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				5.2 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "5.2"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				5.3 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "5.3"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				6.0 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "6.0"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				6.1 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "6.1"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				6.2 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "6.2"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				7.0 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "7.0"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				7.1 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "7.1"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				7.2 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "7.2"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				8.0 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "8.0"		-		Affected
Tiki Search vendor "Tiki"		Tikiwiki Cms\/groupware Search vendor "Tiki" for product "Tikiwiki Cms\/groupware"				8.1 Search vendor "Tiki" for product "Tikiwiki Cms\/groupware" and version "8.1"		-		Affected