CVE-2012-0911

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.

• CWE-502

• http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.htmlExploit
• http://dev.tiki.org/item4109Broken Link
• http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTSVendor Advisory
• http://info.tiki.org/article191-Tiki-Releases-8-4Release Notes
• http://osvdb.org/83534Broken Link
• http://www.exploit-db.com/exploits/19573Exploit, Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/19630Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/54298Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76758Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.htmlExploit
• http://dev.tiki.org/item4109Broken Link
• http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTSVendor Advisory
• http://info.tiki.org/article191-Tiki-Releases-8-4Release Notes
• http://osvdb.org/83534Broken Link
• http://www.exploit-db.com/exploits/19573Exploit, Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/19630Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/54298Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76758Third Party Advisory, VDB Entry

Published

Jul 12, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0904VLC media player 1.1.11 allows remote attackers to cause a d…
• CVE-2012-0905SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gam…
• CVE-2012-0906SQL injection vulnerability in the Moviebase addon for deV!L…
• CVE-2012-0907Directory traversal vulnerability in the web player in NeoAx…
• CVE-2012-0908Cross-site scripting (XSS) vulnerability in logout.php in Si…
• CVE-2012-0909Cross-site scripting (XSS) vulnerability in Horde_Form in Ho…
• CVE-2012-0912SQL injection vulnerability in Stoneware webNetwork before 6…
• CVE-2012-0913SQL injection vulnerability in checklogin.aspx in ICloudCent…
• CVE-2012-0914Cross-site scripting (XSS) vulnerability in display_renderer…
• CVE-2012-0915Integer signedness error in RenRen Talk 2.9 allows remote at…
• CVE-2012-0916Heap-based buffer overflow in RenRen Talk 2.9 allows remote …
• CVE-2012-0917Cross-site scripting (XSS) vulnerability in Hitachi IT Opera…