CVE-2011-4336

Description

Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://seclists.org/bugtraq/2011/Nov/140 ↗
• https://www.securityfocus.com/bid/48806/info ↗