Test ID:	1.3.6.1.4.1.25623.1.0.108064
Category:	Web application abuses
Title:	Tiki Wiki CMS Groupware < 12.11, 13.x < 15.4 Local File Inclusion Vulnerability
Summary:	Tiki Wiki CMS Groupware is prone to a local file inclusion; vulnerability.
Description:	Summary: Tiki Wiki CMS Groupware is prone to a local file inclusion vulnerability. Vulnerability Insight: The Flaw is due to improper sanitization of input passed to the 'fixedURLData' parameter of the 'display_banner.php' script. Vulnerability Impact: Successful exploitation will allow an user having access to the admin backend to gain access to arbitrary files and to compromise the application. Affected Software/OS: Tiki Wiki CMS Groupware versions prior to 12.11 LTS, 13.x, 14.x and 15.x prior to 15.4. Solution: Update to version 12.11 LTS, 15.4 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10143 BugTraq ID: 96787 http://www.securityfocus.com/bid/96787
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.