CVE-2005-1925

Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suck_url parameter to tiki-editpage.php or (2) language parameter to tiki-user_preferences.php.

• CWE-22

• http://securitytracker.com/id?1015190
• http://www.idefense.com/application/poi/display?id=335&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=337&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.securityfocus.com/bid/15390
• http://www.securityfocus.com/bid/15392
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23095
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23099
• http://securitytracker.com/id?1015190
• http://www.idefense.com/application/poi/display?id=335&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=337&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.securityfocus.com/bid/15390
• http://www.securityfocus.com/bid/15392
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23095
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23099

Published

Nov 18, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1919Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-1920The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x th…7.5
• CVE-2005-1921Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earli…
• CVE-2005-1922The MS-Expand file handling in Clam AntiVirus (ClamAV) befor…
• CVE-2005-1923The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV…
• CVE-2005-1924The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allo…
• CVE-2005-1928Trend Micro ServerProtect EarthAgent for Windows Management …
• CVE-2005-1929Multiple heap-based buffer overflows in (1) isaNVWRequest.dl…
• CVE-2005-1930Directory traversal vulnerability in the Crystal Report comp…
• CVE-2005-1931GoodTech SMTP Server 5.14 allows remote attackers to cause a…
• CVE-2005-1932Lpanel 1.59 and earlier, and other versions before 1.597, al…
• CVE-2005-1933Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to e…